midterm terms

Question 1

phishing

Answer 1

tricking people to give away personal information (usually by email)

Question 2

advanced encryption standards

Answer 2

encryption standards established in 2001 and supports 128, 192, 256 bits

Question 3

hash

Answer 3

using an algorithm, sorts data with a label so by the end of transit, it’ll be known if the data was tampered with

Question 4

what is a virus

Answer 4

a malicious software that attaches itself to a host

Question 5

ransomware

Answer 5

a type of virus that disables the system for ransom

Question 6

worm

Answer 6

a complete program that copies itself from one computer to another

Question 7

stream cypher

Answer 7

encode and decode the message one character (byte) at a time

Question 8

block cypher

Answer 8

encode and decode the message many characters (bytes) at a time, usually 16 bytes

Question 9

signatures

Answer 9

authentication of who sent the message

Question 10

access control matrix

Answer 10

a detailed tables of subject to objects where the cells are the rights of the related subjects and objects by row and column

Question 11

autorun virus

Answer 11

a virus that resides as an autorun program in a dick (ex: usb)

Question 12

mandatory access control

Answer 12

the system sets the rights

Question 13

logic bomb

Answer 13

violates the site security policy when some external event occurs

Question 14

stealth virus

Answer 14

conceals infection of files undetected

changes data within the intercepted calls

Question 15

access control

Answer 15

the rules of what someone has access to

Question 16

steganography

Answer 16

an attack that hides data in other data

Question 17

integrity

Answer 17

data is trustworthy and free from tampering (no change)

Question 18

public/private keys

Answer 18

used for encryption and decryption

Question 19

public key

Answer 19

encryption, available to anyone

Question 20

private key

Answer 20

decryption, known only to individual

Question 21

trojan horse

Answer 21

malware that tricks users of its true intent by disguising itself as a normal program

Question 22

RSA

Answer 22

uses math and large prime integers to drive the key, and uses exponential and modulus functions with the keys encode and decode the message

Question 23

distributional denial of service (DDoS)

Answer 23

the attacker floods a server with internet traffic to prevent users from accessing online services (affects availability)

Question 24

availability

Answer 24

viewable/access by people

Question 25

clark wilson model

Answer 25

protects the integrity of commercial information by allowing only certified actions by explicitly authorized users on resources (contraints)

Question 26

symmetric key

Answer 26

the encryption key and decryption key is the same

Question 27

digital encryption system (DES)

Answer 27

block cypher, encryption, 56-bit key length, uses algorithms to scramble data into an unreadable format

Question 28

polymorphic

Answer 28

encryption of data in multiple forms that are protected by multiple keys

Question 29

transposition

Answer 29

reorder the message by choosing every nth character. n is both encryption and decryption key

Question 30

Bell-LaPadula Model

Answer 30

used for confidentiality, read down, write down, policy method

Question 31

block modes

Answer 31

for block cyphers, key generation used during the encryption for each single block

Question 32

biba model

Answer 32

used for integrity, read up, write down, the higher the integrity level, the more trustworthy the source

Question 33

firewall

Answer 33

allowing traffic from source to destination

Question 34

collision

Answer 34

when 2 inputs produce the same (hash) output

Question 35

confidentiality

Answer 35

data is kept secrete or private

Question 36

policy

Answer 36

a set of rules that define the degree of protection required

Question 37

Protocols

Answer 37

specification on implementing policy

Question 38

practice

Answer 38

actions to implement protocol, making sure protocols are being followed

Question 39

Rivest Cipher 4 (RC4)

Answer 39

stream cypher, generates a key stream of bytes (1-256) from an initial variable length key, key scheduling algorithm for each byte at a time

Question 40

access control list

Answer 40

objects perspective

Question 41

access control capability list

Answer 41

subjects perspective

Question 42

substitution

Answer 42

modify the plain text by swapping each character with another character on the list