CIS227_HighYield_Flashcards
(52 cards)
What is the CFAA?
The Computer Fraud and Abuse Act; a U.S. law enacted in 1986 that criminalizes unauthorized access to computer systems.
What does ‘unauthorized access’ mean under CFAA?
Accessing a computer system without permission or exceeding authorized access.
What is the DMCA?
The Digital Millennium Copyright Act; a U.S. law that criminalizes the circumvention of DRM and protects online service providers from copyright infringement liability.
What is the ECPA?
The Electronic Communications Privacy Act; regulates government and third-party access to wire, oral, and electronic communications.
What is the PATRIOT Act?
Post-9/11 legislation that expanded surveillance capabilities of law enforcement, including roving wiretaps and monitoring internet activity.
Define ‘ethical hacking.’
Ethical hacking is authorized testing of systems to find and fix security vulnerabilities.
What is a ‘white hat’ hacker?
An ethical hacker who uses skills to protect systems and identify vulnerabilities.
What is a ‘black hat’ hacker?
A malicious hacker who exploits systems for personal or financial gain.
What is a ‘gray hat’ hacker?
A hacker who may violate laws or ethical standards but without malicious intent.
What is social engineering?
Manipulating people into giving up confidential information, often via deception.
Give an example of social engineering.
Phishing emails tricking users into providing login credentials.
What is a phishing attack?
A form of social engineering where attackers impersonate legitimate entities to steal sensitive data.
What is spear phishing?
Targeted phishing directed at specific individuals or organizations.
What is cyberstalking?
Harassing someone via digital means, such as emails, messages, or social media.
What is identity theft?
Using someone else’s personal information without consent, typically for fraud.
What is intellectual property?
Creations of the mind, such as inventions, art, music, and software, protected by copyright, trademark, or patent.
What is copyright infringement?
Using copyrighted material without permission.
What is a trademark?
A recognizable sign or expression identifying products or services of a particular source.
What is fair use?
Limited use of copyrighted materials without permission for purposes such as commentary, criticism, or education.
What is digital forensics?
The practice of collecting, analyzing, and preserving digital evidence.
What is chain of custody?
The documented and unbroken transfer of evidence.
What is due diligence?
Taking reasonable steps to avoid harm to others or prevent a legal violation.
What is due care?
Actively maintaining security controls and policies to protect assets.
Define cybercrime.
Any criminal activity involving a computer or network.
