Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

M362 - Definitions > Unit 10 > Flashcards

Unit 10 Flashcards

1
Q

access controller

A

A component used by the security manager to check permissions
belonging to classes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

action (in a policy file)

A

In Java, the part of an entry in a policy file that describes the
kinds of action that may be performed with respect to some target.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

application domain

A

A domain containing less privileged (non-system domain)

classes in a protection domain.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

application gateway

A

A kind of firewall providing a proxy service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

asymmetric cryptography

A

A code in which the encoding key is different from the decoding key, but is related to it in a non-trivial way (an example of this is public key
cryptography).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

audit log

A

A record of the activity on a system that can be used to determine what users have done and to assist recovery in the case of an attack.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

auditing

A

Capturing a secure record of security-related events for non-repudiation, recovery and proof of effectiveness.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

authentication (identification)

A

The process of determining a user’s or software’s identity.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

authorisation

A

The process of determining what code is allowed to do, according to how it is signed, what code base it comes from or what caller it is associated with (for example, what user invoked it).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

availability

A

The property of a system that can be used when it is needed by an authorised user or application.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

block cipher

A

A cipher in which encryption takes place on blocks of plaintext.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

brute-force attack

A

An attack in which possible keys are attempted until a correct one is found.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

buffer overflow

A

The error that occurs when a buffer is assigned more data than it should hold.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

certifying authority

A

An organisation that issues a certificate associating a user with a cryptographic key.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

challenge

A

A method of authorisation in which the user is presented with a question or other task whose successful completion helps to determine their identity.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

checksum

A

A number used to check the integrity of a message.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

cipher

A

A code, a means of encrypting plaintext.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

ciphertext

A

The output of a cipher.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

click fraud

A

The fraudulent generation of clicks in order to profit from cost-per-click web pages.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

code base

A

The location of code in terms of its URL.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

collision

A

A collision occurs in a hash function when two or more inputs generate the same output.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

confidentiality

A

The property of a system that ensures that data is visible only to authorised users.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

credentials

A

Security information associated with a subject, such as keys or passwords.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

cryptanalysis

A

The science of decoding ciphers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
cryptographic hash function
A hash function with desirable properties for | applications in security.
26
cryptographic service
A cryptographic facility provided by implementers of services for Java’s cryptography API, such as ciphers, message digests and digital signing.
27
cryptography
The science of ciphering.
28
deciphering (decryption)
Converting ciphertext to plaintext.
29
declarative security
Using an XML deployment descriptor file to delegate authorisation checks to a container.
30
digital certificate
An electronic means of associating a user with a key.
31
digital signature
An electronic means of signing a communication.
32
digitally signed
Having an electronic signature.
33
domain
A set of classes with the same permissions.
34
end-to-end encryption
An approach to network security in which the sending and receiving nodes of a message implement encryption and decryption using a shared key.
35
exponential
Growing according to an exponential relationship; that is, according to a power of a number.
36
fabrication
The construction of false or unauthorised information.
37
firewall
A technology to filter internet traffic between a local and external network.
38
group
A collection of authenticated users.
39
hacker
An unauthorised user of a system.
40
handshake
An exchange of information to establish parameters for communication.
41
hash function
A one-way function that maps an input to a small output.
42
hierarchy of trust
The relationship in which one or more parties place trust in other parties to perform authentication.
43
homograph attack
An attack using social engineering in which a name similar to another is used to try to deceive a user.
44
integrity
The property of information that it has not been altered by an attacker or otherwise corrupted.
45
interception
Access of information by an unauthorised user.
46
interruption
An attack preventing availability of a resource.
47
key
A value used to decipher ciphertext.
48
key space
The set of keys associated with a cipher.
49
key stream
The generation of changing keys for the encryption of data in a stream cipher.
50
linear
Growing according to a linear relationship, that is, by a constant factor for each fixed change in input.
51
link encryption
An approach to network security in which each node implements encryption and decryption, each communicating pair using a different shared key.
52
linking
The stage at which classes are incorporated into the runtime state of a virtual machine.
53
loading
The stage at which classes are located and checked.
54
memory leak
Loss of memory areas due to mismanagement of memory.
55
message authentication code (MAC)
A code used to check the integrity (and in | some cases identity) of a message.
56
message digest
A reduced size version of a message produced by a hash function.
57
middle person
An attacker interposed between a sender and receiver in location or time.
58
modification
Unauthorised alteration of information.
59
nonce
A value used once to defeat replay attacks.
60
non-repudiation
The property of a system that prevents users from denying sending or receiving some information or performing some action.
61
one-time pad
A cipher with perfect secrecy, invented in 1917.
62
one-way function
A function with the property that it is easy to obtain an output from an input, but hard to determine the input given the output.
63
packet
The unit of information in network communication.
64
packet filtering
A technique allowing only desirable packets to travel across a firewall.
65
perfect secrecy
The property of a code in which the ciphertext does not reveal any information about the plaintext or code.
66
permissions
Values that determine which actions are authorised within a system.
67
plaintext
Communication that has not been subjected to encryption.
68
pointer
A memory address that may be manipulated in a variety of ways.
69
policy entry
``` An entry in a policy file describing permissions assigned to a class according to its code base, signing or principals. ```
70
polyalphabetic substitution
A code in which ciphertext is formed from groups of more than one character at a time.
71
primordial loader
The trusted class loader in the JVM which bootstraps the system, loading the main class.
72
principal
An identity associated with a subject, such as the subject’s login ID or an organisation’s name.
73
private key
A cipher key that is kept secret and is used in conjunction with a public key in asymmetric cryptography.
74
programmatic security
Explicit authorisation checks by method invocation.
75
protection domain
The interaction of features enforcing security policies in Java, particularly as regards permissions allocated to classes.
76
provider
A supplier of cryptographic products.
77
public key
A key used in combination with a private key that may be publicised without compromising security of communication.
78
public key cryptography
Cryptography in which public and private key pairs are employed; an example of asymmetric cryptography.
79
public key infrastructure (PKI)
A system for the association of keys with users and the management of key-related information.
80
realm
A set of valid users and groups for an application.
81
reference
A memory value that cannot be manipulated, but merely provides access to objects.
82
replay
An attack in which intercepted or stored information is reused to gain advantage.
83
role
A collection of identities or category of identities with shared permissions.
84
root certificate
A certificate granted to a certifying authority.
85
salt
A number used to prevent collisions in hash functions and or in general to add variability to the processing of information.
86
secret key
A key that must be kept secret, as used in symmetric cryptography.
87
secure channel
A communication channel between a pair of processes providing authentication, confidentiality, integrity services and time stamping.
88
security manager (JVM)
A component of the JVM concerned with authorisation of what code may or may not do.
89
security policy (JVM)
A collection of permissions contained in a policy object, usually determined using policy files.
90
security through obscurity
The discredited notion that secrecy of design alone can provide security.
91
session key
A key that is used only while a session is in effect and then discarded.
92
singleton
A programming design pattern ensuring that only one of an object may exist at a time.
93
social engineering
A collection of techniques used to manipulate people into performing actions, or divulging confidential information. The term typically applies to trickery associated with information gathering or accessing computer systems.
94
stateful packet inspection
A firewall technique in which the state of a system is used to determine the legality of traffic across a firewall.
95
statically typed
Checking typing of variables at compile time.
96
statistical analysis
A cryptanalytical technique using patterns of frequency of letters in languages as an aid to deciphering messages.
97
stream cipher
A cipher whose key changes frequently to encrypt a stream of data.
98
strong typing
Checking for potentially troublesome conversions of types at compile time.
99
subject (for authentication)
A grouping of related information for an entity in a | security system, such as a collection of identities (principals) and credentials.
100
substitution
A ciphering technique in which one character in a language is substituted for another.
101
symmetric cryptography
Cryptography employing a private key or in which the decoding key is trivially related to the coding key.
102
system
In the context of security, refers to the hardware, platform, application software and users’ interactions.
103
system domain
The collection of classes within a protection domain that are trusted.
104
target
An entity to which a permission is applied in a policy file.
105
threat monitoring
The active consideration of dangers to a system’s security.
106
time stamping
The inclusion of information with a message so that its time of occurrence can be determined.
107
transposition
An encryption technique where the order of information in the plaintext is obscured.
108
trapdoor function
A one-way function which is reversible if given some secret information.
109
tunnelling
Wrapping one protocol in another protocol.
110
type safety
The ability of a language to check that types are being used correctly.
111
vector
A route by which an attack may occur on a computer system.
112
virtual private network (VPN)
A network created by a form of tunnelling in which end-to-end encryption takes place between the two ends of the tunnel, so creating a private network of sorts.
113
web of trust
A non-hierarchical approach to establishing trustworthiness of digital certificates.

M362 - Definitions (12 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions