Week 1 - IT Security - Defense against Digital Arts Already Passed

Week 1 - IT Security - Defense against Digital Arts Already Passed Confidentiality, Integrity, and Availability form the CIA triad. ✔✔CIA triad ___________________________ refers to data only viewable by authorized us ...

Week 1 - IT Security - Defense against Digital Arts Already Passed Confidentiality, Integrity, and Availability form the CIA triad. ✔✔CIA triad ___________________________ refers to data only viewable by authorized users. ✔✔Confidentiality ________________________ Refers to data that won't be manipulated or corrupted. ✔✔Integrity ___________________ means that services remain reachable and available. ✔✔Availability _________________ refers to the possibility of suffering a loss in the event of an attack on the system. ✔✔Risk A flaw in the system that could be exploited to compromise the system is called a ____________________. ✔✔Vulnerability A vulnerability that is not known to the software developer or vendor, but is known to an attacker is called a ____________________________. The name refers to the amount of time the software vendor has had to react to and to fix the vulnerability, zero days. ✔✔Zero day vulnerability An ______________________ is software that is used to take advantage of a security bug or vulnerability. ✔✔Exploit A _______________ is the possibility of danger that could exploit a vulnerability. Threats are just possible attackers, sort of like burglars. Not all burglars will attempt to break into your home to steal your most prized possessions, but they could, and so they're considered threats. ✔✔threat A ________________ in the security world is someone who attempts to break into or exploit a system. ✔✔hacker ______________________ hackers attempt to find weaknesses in a system, but also alert the owners of those systems so that they can fix it before someone else does something malicious. ✔✔white hat _______________ hackers try to infiltrate systems for malicious intent. ✔✔black hat An actual attempt to cause harm to a system is known as an _________________. ✔✔attack ______________________ is a type of malicious software that can be used to obtain your sensitive information or delete or modify files. The most common types are viruses, worms, adware, spyware, Trojans, root kids, backdoors, and botnets. ✔✔malware A computer _______________ attaches itself to some sort of executable code like a program. When the program is running, it touches many files, each of which is now susceptible to being infected with the virus. So, the virus replicates itself on these files, does the malicious work it's intended to do, and repeats this over and over until it spreads as far as it can. ✔✔virus ________________ are similar to viruses except that instead of having to attach themselves onto something to spread, worms can live on their own and spread through channels like the network. ✔✔worms One case of a famous computer worm was the ________ which spread to millions of Windows machines via email, with a subject line of I Love You, and an attachment disguised as a love letter text file, actually an executable file that when opened attacked by copying itself to files and folders, launching other malicious software, replacing files, and then hiding. ✔✔ILOVEYOU or Love Bug ____________________ is software that displays advertisements and collects data. Sometimes downloaded intentionally with free software programs. ✔✔adware A _____________________ is malware that disguises itself as one thing, like software, but does something else. Similar to how the historical Trojan horse was accepted into the city by the citizens of Troy, a computer Trojan has to be accepted (executed) by the user. ✔✔Trojan _____________________ is a type of malware that's meant to spy on you, including monitoring your computer screens, key presses, and webcams, and then reporting or streaming all of this information to another party. ✔✔spyware ___________________ is a common type of spyware that's used to record every keystroke you make. It can capture all of the messages you type, confidential information, passwords, etc. ✔✔keylogger __________________ is a type of attack that holds your data or system hostage until you pay some sort of ransom. ✔✔ransomware A recent case of ransomware was the __________________ ransomware attack in May of 2017. The malware took advantage of a vulnerability in older Windows systems, infecting hundreds of thousands of machines across the world. Most notably, the attack shutdown the systems for the National Health Services in England, causing a health-related crisis. ✔✔WannaCry A compromised machine, known as a _______________, is the result of malware that can utilize someone else's machine to perform a task that is centrally controlled by the attacker. ✔✔bot A collection, or network of bots, is called a _______________. They are designed to utilize the power of Internet-connected machines to perform some distributed function. ✔✔botnet A popular attack has been creating Botnets to do stuff like mine ___________, using thousands of computers to run computations and rake in more and more Bitcoin. ✔✔Bitcoins A _______________ is a secret entryway into a system for attackers. They are most commonly installed after an attacker has gained access to your system and wants to maintain that access. ✔✔backdoor A ____________________ by its name is a kit for root, meaning a collection of software or tools that an admin would use to allow admin level modification to an operating system. It can be hard to detect because it can hide itself from the system using the system itself. It can run lots of malicious processes without showing up in task manager because it can hide its presence. ✔✔rootkit A type of Malware that's intentionally installed, after a certain event or time has triggered, to run a malicious program is called a ______________________. ✔✔logic bomb A popular logic bomb case that happened in __________, wherein an unhappy systems administrator at a bank set off a logic bomb and brought down a company's services in an attempt to drop their stock prices. The former employee was caught and charged with fraud, then sentenced to eight years in prison. ✔✔2006