The Triad
also called privacy, which means that data access is restricted to authorized personnel only
Confidentiality
a popular port scanning tool that can be used to discover vulnerabilities in networked systems
nmap
ongoing effort to protect networked systems connected to the Internet and to protect all of the data from unauthorized use or harm
cybersecurity
a software vulnerability that occurs when data is written beyond the limits of memory areas that are allocated to an application. This vulnerabilty can cause an application to access memory that is allocated to other processes.
buffer overflow
a technique in which an attacker can take control of a device without the owner's knowledge. The attacker can intercept and capture information that passes through the device on its way to another destination.
Man in the Middle (MiTM)
the term that indicates accuracy, consistency, and trustworthiness of the data
Integrity
hardware or software that prevents hackers from accessing your personal or company data
firewall
the CIA triad
confidentiality, integrity, and availability
the act of using an exploit against a vulnerability with the goal of breaking into the target system
cyberattack
a way of gaining access to resources that manipulates individuals into performing actions or divulging confidential information.
social engineering
the term that describes the services and data being well maintained and able to be accessed all the time
availability
a program that scans a computer for malicious software and deletes it
antivirus
persons or organization that break into networks or computer systems to discover weaknesses with the intention to improve the security of these systems
white hat hacker
any type of hardware or software defect that malicious users attempt to exploit
security vulnerability
the act of discovering a password that is used to protect a wireless network
wifi password cracking
data encryption, username ID and password, two factor authentication
methods to ensure confidentiality
a type of security measure that restricts access to networking closets, server locations, as well as fire suppression
physical security
attacks originating from within an organization
internal security threats
a vulnerability in which data supplied to a program by a user or exploit causes the application to behave in an unintended way
non-validated input
use of a generic fraudulent email that appears to be sent by a legitimate source. The email tricks people into installing malware or sharing confidential information
phishing
file permissions, user access control, version control, and checksums
methods to ensure integrity
released by operating system and application producers to avoid exploitation of vulnerabilities
security patches and updates
any computer code that can be used to steal data, bypass access controls, or harm or compromise a system
malware
refers to a security flaw that has been discovered by a threat actor but is unknown to the enterprise and software vendor.
zero day vulnerability
malware that carries out malicious operations while appearing to have a desired function. included in non-executable files
trojan horse