click below
click below
Normal Size Small Size show me how
Cybersecurity Vocab
| Term | Definition |
|---|---|
| Cybersecurity | the protection of computer systems, networks, and data from digital attacks |
| Internet of Things (IoT) | network of devices with the ability to connect and exchange data |
| Personal Data / Personally Identifiable Information | any data that can be used to identify an individual, either directly or indirectly |
| CIA Triad | Confidentiality, Integrity, and Availability |
| Confidentiality | the protection of information from people who are not authorized to view it |
| Integrity | protecting information from unauthorized or unintentional alteration |
| Availability | the assurance that systems and data are accessible by authorized users when and where needed |
| Digital Footprint | The information about a particular person that exists on the internet as a result of their online activity |
| Cyberbullying | The use of electronic communication to bully a person (includes sending, posting, or sharing negative, harmful, false, or mean content about someone else; a crime in many states |
| Privacy | the appropriate use of your data |
| Security | the integrity, confidentiality, and availability of your data |
| Password | a unique string of characters used to authenticate a user's identity and access an account or system |
| 2 Factor Authentication | adds a second step to the verification process, such as texting/calling your phone with a unique pin |
| Hacker | someone who seeks to break through defenses and exploit weaknesses in a computer system or network |
| Black Hat Hackers | Criminal hackers who break into secure networks to destroy, modify, or steal data |
| White Hat Hackers | Have permission to hack a system to test for vulnerabilities |
| Grey Hat Hackers | Does not have permission to hack a system but does so anyway to find vulnerabilities and then requests payment from the organization; oftentimes, it is illegal. |
| Cyberterrorism | a premeditated, politically motivated cyber attack |
| State-Sponsored Cyberattacks | instances where attacks on a national government are funded, ordered, and guided by an enemy state or country |
| Hacktivism | a combination of the words “hacking” and “activism" and is used when attacks are used to stimulate social or political reform |
| Counterterrorism | a sector of cyber defense that aims to stop and defend against cyberterrorism by using techniques such as intelligence gathering and intelligence security |
| Intelligence Gathering | the process of gaining information from publicly available resources such as the internet as well as directly from individuals |
| Information Security | the process of protecting important data and defending against cyberattacks that aim to steal this data |
| Algorithm | A specific set of instructions or rules that are followed to complete a process; computers use these to complete tasks and solve problems. |
| Asymmetric/Public Key Encryption | Encryption that uses a pair of keys; one key is used for encryption (public key), and a different key is used for decryption (private key). |
| Block Cipher | A cipher that groups bits into blocks of plain text before applying the encryption. |
| Cipher | A set of well-defined steps used to change plain text into cipher text (creates encryption, encrypts the information). |
| Cipher Text | Encrypted plain text that is no longer readable by humans or computers without the correct cipher to decrypt it. |
| Collisions | Occur when two inputs (file, image, text, application, etc.) are mapped to the same outputs (Hash digest) |
| Crib | A word or set of words is believed to be part of the encrypted message. |
| Cryptanalysis | The study of ciphers, ciphertext, and encrypted data to learn how they work, their weaknesses, and how to access encrypted data without a key. |
| Cryptography | The practice and study of creating secure communications by converting plaintext into ciphertext |
| Decryption | The process of converting ciphertext into readable plain text |
| Digest | The name of fixed-sized short output created from an input string of any length |
| Digital Certificate | Electronic document that proves a computing device can be trusted |
| Encryption | The process of converting plaintext into ciphertext |
| Hashing/Cryptographic Hash Function | Changes a message into an unreadable string of text without the use of keys called a digest. |
| Indecipherable | When you cannot decode or figure out the meaning of information that has been encrypted. |
| Key/Cryptographic Key | Information that is a string of letters or numbers used for encryption and decryption (public or private) |
| Key Exchange | Method in cryptology to exchange keys (public or private) between two parties. |
| Man-in-the-Middle Attack | Occurs when someone secretly intercepts communications/data between two parties by impersonating one or both parties. |
| Modulus | Common mathematical function used in cryptology. |
| Non-Repudiation | When using keys, it proves the sender and receiver are who they say they are. |
| Plain Text | Ordinary words and text that are readable by humans and have not been converted into ciphertext. |
| Reverse Engineering | Working backward through an encryption to reveal the input or the key. |
| Substitution Cipher | Changes one plaintext character or symbol into another to create ciphertext. |
| Symmetric Encryption | The same key is used for both encryption and decryption. |
| Transposition Cipher | Shifts the position of a plaintext character or groups of characters using a specific system. |