click below
click below
Normal Size Small Size show me how
OS Mod 6
| Question | Answer |
|---|---|
| The capability of a system to fulfill its mission, in a timely manner, in the presence of attacks, failures, or accidents | System Survivability |
| A gap in system security that can be malicious or not, which severely damages the system's credibility | Security Breach |
| Any breach of security or modification of data that was not the result of a planned intrusion | Unintentional Intrusion |
| An attack in which a malicious hacker takes over computers via the Internet and causes them to flood a target site with demands for data | Denial of service (DoS) attack |
| When unauthorized users gain access to search through secondary storage directories or files for information they should not have the privilege to read | Browsing |
| When unauthorized users monitor or modify a user's transmission | Wire Tapping |
| Entering systems by guessing authentic passwords | Repeated Trials |
| An unspecified and undocumented entry point to the system, often installed by a diagnostician or programmer for future use | Trap doors |
| The use of discarded materials such as disks, CDs, or printouts to enter the system illegally | Trash collection |
| Small programs written to alter the way a computer operates, which must be self-executing and self-replicating | Virus |
| A destructive program with a fuse, triggered by a certain event such as a keystroke or Internet connection | Logic bomb |
| A destructive program triggered by a specific time, such as a day of the year | Time bomb |
| A threat that combines into one program the characteristics of other attacks like viruses, worms, and Trojans | Blended Threat |
| Programs that reside on computers attached to the network and peruse data packets as they pass by | Sniffers |
| The act of disguising a communication from an unknown source as being from a known, trusted source | Spoofing |
| A technique whereby system intruders gain access to information about a legitimate user to learn active passwords (e.g., searching a desk or calling friends) | Social Engineering |
| The act of fraudulently using email to try to get the recipient to reveal personal data | Phishing |
| A variation of phishing in which the phisher sends fake emails to a certain organization's employees | Spear-phishing |
| A type of phishing that involves the use of Short Message Service (SMS) texting | Smishing |
| A scam similar to smishing except that the victims receive a voice mail telling them to call a phone number or access a Web site | Vishing |
| A set of programs that enables its user to gain administrator-level access to a computer without the end user's consent or knowledge | Rootkits |
| A malware that disables a computer or smartphone until the victim pays a fee | Ransomware |
| Software to combat viruses that can be preventive, diagnostic, or both | Antivirus Software |
| A set of hardware and/or software designed to protect a system by disguising its IP address from unauthorized users and blocking dangerous intrusions | Firewall |
| A verification that an individual trying to access a system is authorized to do so | Authentication |
| A network authentication protocol designed to provide strong authentication for client/server applications using secret-key cryptography | Kerberos |
| The most extreme protection method for sensitive data where data is put into a secret code requiring a public and private key | Encryption |
| A method of breaking encrypted passwords that requires a copy of the encrypted password file and the encryption algorithm | Dictionary attack |
| A credit card-sized calculator used as a password alternative that requires both "something you have and something you know" | Smart card |
| The science and technology of identifying individuals based on unique biological characteristics like fingerprints, retinas, or voice prints | Biometrics |