Malicious Software
Umbrella term for software designed to infiltrate or damage systems.
Malware:
Deceptive emails/messages to trick individuals into disclosing credentials.
Phishing
Network barrier that inspects incoming/outgoing traffic.
Firewall
Unlawful access to confidential, proprietary, or protected records.
Data breach
Duplicate archive of critical operational files stored separately
Backup
Software that encrypts files and extorts money for decryption.
Ransomware
Psychological manipulation of staff to hand over private data.
Social engineering
Utility software engineered to detect, quarantine, and eliminate threats.
Antivirus
Emergency alert signal indicating an active, high-priority breach
Code red
Physical external drives or tape media completely detached from the internetOffline storage
Offline storage
Software that secretly tracks user activity and gathers information.
Spyware
Forging an email header, IP address, or sender name to masquerade as trusted.
Spoofing
Cryptographic method of scrambling readable data
Encryption
Systemic flaw or weakness in software code that can be leveraged.
Vulnerability
Specialist tasked with configuring hardware, infrastructure, and resolving faults.
IT technician
Malicious code disguised as legitimate software
Trojan horse
Systematically extracting and compiling usernames and passwords
Credential harvesting
Protocol requiring two independent authentication factors.
Two-factor authentication
Automated chronological record detailing system events and logins.
Network log
Formal protocol defining containment, eradication, and recovery steps
Incident response plan
Person who exploits technical weaknesses to gain unauthorized access.
Hacker:
Assault aimed at exhausting server resources by flooding requests
Denial of Service (DoS)
Robust string of characters, numerals, and symbols
Strong password
Segregating an infected computer or file to stop lateral spread.
Quarantine
Comprehensive operational review assessing cyber defences and compliance
Security audit