Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
leftovers
| Term | Definition |
|---|---|
| 802.1x | port based network access control with central authentication before allowing network access |
| Key risk indicator | early warning that risk is increasing |
| Risk threshold | point where action must be taken |
| Trapdoor function | encryption is easy using the public key but decrypting without the private key is hard (RSA) |
| Layer 7 firewall | makes decisions about the traffic based on the application payload |
| Discretionary access control (DAC) | owner determines permissions |
| Risk tolerance | amount of risk org is willing to accept |
| WPA2-PSK | leverages a passphrase to create a key (PMK) to encrypt communications |
| SD WAN | provides centralized network management |
| SCADA definition | industrial control/critical infrastructure |
| Code signing | software authenticity/integrity |
| Centralized governance | decision making authority comes from a single authority or department in an org |
| Due diligence | assessing a vendor before/while doing business |
| Agent based network access control (NAC) | use software installed on a central server to monitor network traffic |
| Agentless network access control (NAC) | monitoring network devices directly through the use of network level protocols |
| Buffer overflow | writes beyond allocated memory |
| Time of check/use (TOC/TOU) vulnerability | occurs when an attacker exploits the time gap between the verification of data and its use |
| Inline | evaluates traffic and reject or modify packets according to policies the company sets |
| Botnet attack preventative | enable DDoS protection |
| RAT preventative | patch vulnerable systems |
| Worm preventative | change the default application password |
| Keylogger preventative | disable remote access services |
| Backdoor preventative | conduct a code review |
| biggest factor in live data acquisition | value and how long digital information persists before it changes |
| authenticated vulnerability scanning | scanner logs in and looks inside the system |
| Extensible authentication protocol (EAP) | authentication framework supporting multiple login methods |
| Unified threat management (UTM) | multiple security functions in one appliance (firewall, IPS, etc) |
| Active device | interacts with network traffic and can take immediate actions |
| Fail closed mode | system automatically denies all traffic if security device fails |
| On path attack | network attack that involves intercepting data in transit |
| Netflow | a network tool that provides visibility into network traffic and helps identify potential security threats |
| WPA | wifi protected access |
| Advanced encryption standard (AES) | most secure and widely used encryption protocol for wireless networks |
| Sender policy framework (SPF) | "which servers may send email for my domain?" |
| Next generation firewall (NGFW) | application aware, deep packet inspection, security integration, intrusion prevention |
| Federation | allows different orgs to share digital identities, enabling single sign on across them |
| Domain keys identified mail (DKIM) | email signed so receiver can verify domain/message |
| Reflected DDoS attack | the attacker gives your IP address out and you get traffic |
| Amplified DDoS attack | small request creates much larger response |
| Acceptable use policy (AUP) | defines the rules for the appropriate use of an orgs resources |
| SCADA stands for | Supervisory Control and Data Acquisition |
| Risk appetite | the orgs willingness to take on risk |
| Risk register | lists all identified risks, their potential impact, and assigned risk owners |
| WPA3 | newer/stronger wifi security protocol |
| WPA3 uses what key agreement | diffie hellman |
| Prevents eavesdropping and tampering | WPA3 |
| ARO | annual rate of occurrence |
| ARO definition | expected number of times an event occurs per year |
| SLE | single loss expectancy |
| ALE | annualized loss expectancy $ |
| ALE calculation | SLE times ARO |
| Package monitoring | keeping track of software package versions and security patches |
| Sending a secret to bob | bob's public key |
| Bob decrypts | bob's private key |
| Proxy server | receives and forwards requests for servers, sitting between a client and server |
| EF | exposure factor |
| EF definition | the percentage of an asset's value expected to be lost from one event |
| GDPR | general data protection regulation |
| GDPR definition | personal data can only be collected with the individual’s informed consent |
| Differential backup | copies all changes made since the last full backup |
| Netstat | lists TCP and UDP port info |
| Nmap | can identify hosts, open ports, and services running on a system |
| Nessus | vulnerability scanning tool that can identify hosts and open ports and identify software specific weaknesses |
| PKI | public key infrastructure |
| SSL | creates an encrypted link between a web browser and a server |
| SOAR | security orchestration, automation, and response |
| SOAR definition | uses runbooks to automate incident response |
| SIEM | security information and event management |
| SIEM definition | centrally collect log data that can be analyzed for potential security incidents |
| SSO | allows a user to authenticate to the network once and access multiple systems without needing to provide additional credentials |
| Security fuzzing | sample data is passed to the application to test its security and functionality |
| RADIUS | remote authentication dial in user service |
| RADIUS definition | protocol used for centralized AAA services, especially involving wireless networks and remote server access |
| FTP | file transfer protocol |
| FTP port | 21, not encrypted |
Created by:
crly