Study "exam 3", a flashcard deck on FORKSAI.
Define 'Cyber threat'.
A cyber threat refers to any potential malicious act that seeks to damage data, disrupt operations, or gain unauthorized access to computer systems or networks. It encompasses various forms of attacks and vulnerabilities that can compromise information security.
Distinguish between 'Malware' and 'Social Engineering'.
Malware is malicious software designed to disrupt, damage, or gain unauthorized access to a computer system, often without the user's knowledge. Social Engineering, on the other hand, is a manipulation technique that exploits human psychology to trick users into divulging confidential information or performing actions that compromise security.
Define 'Denial of Service' (DoS) attack.
A Denial of Service (DoS) attack is a cyber-attack where the perpetrator seeks to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a host connected to the Internet. This is often achieved by overwhelming the target system with a flood of traffic.
What is a 'Man-in-the-middle' attack?
A Man-in-the-middle (MITM) attack is a form of eavesdropping where an attacker intercepts and relays messages between two parties who believe they are communicating directly with each other. The attacker can read, insert, and modify the messages, making it seem as if the communication is legitimate.
Define 'Password attacks'.
Password attacks are attempts by an unauthorized party to gain access to a system by cracking or guessing user passwords. These attacks can involve various techniques such as brute-force attacks, dictionary attacks, or credential stuffing to compromise user accounts.
What is the 'Principle of Least Privilege'?
The Principle of Least Privilege (PoLP) is a security concept in which a user is given the minimum levels of access—or permissions—needed to perform their job functions. This limits the potential damage from a security breach or error, as an attacker or compromised account would only have limited access to resources.
Define 'Access Control Lists' (ACLs).
Access Control Lists (ACLs) are a list of permissions attached to an object, such as a file or directory, that specifies which users or system processes are granted access to the object and what operations are allowed on it. They are a fundamental component of access control mechanisms in operating systems and networks.
Distinguish between 'Identification' and 'Authentication'.
Identification is the process by which a user claims an identity, typically through a username. Authentication is the process of verifying that the claimed identity is legitimate, usually by providing credentials like a password or biometric data, to confirm the user is who they say they are.
Define 'Authorization'.
Authorization is the process of determining what specific resources or actions a user is permitted to access or perform after they have been successfully identified and authenticated. It dictates the scope of a user's access rights within a system.
What is 'Access Control'?
Access Control is a security technique that regulates who or what can view or use resources in a computing environment. It involves identification, authentication, and authorization to ensure that only authorized individuals or systems can access specific data or functionalities.