computer system security final exam

method to extensively define rule details for all subjects & objects

virus that changes the code without changing the algorithm to evade static detection

security principle that resources are accessible

when 2 datasets generate same hash value

IDS model for finding zero-day viruses & intruders by examining the system behavior data for suspicious activity

initial symmetric digital standard for encrypting blocks of data that has since been depreciated

cryptographic process that exchanges one pattern for another

IDS model for defining proper parameter ranges and marking anything outside the range as a violation

cypher that operates using a large group of data at a time vs a single char

IDS component that analyzes the incoming data

policy model that enforces integrity by validating constrained data source

current symmetric digital standard that uses 128, 192, or 250 bit keys

maleficent program that replicates & propagates on its own

security responsibility that implements the actions involved in attaining security

security principle that information should only be shared with appropriate parties

rules that govern which identities can access which sources

virus that catches kernel traces and calls to remove any revealing details

using several forms in binding an entity to an identity

communication should not be modified between parties

method that uses large prime numbers for generating key pairs

defines access from the perspective of resource objects

IDS data collector that resides on a firewall in front of the machines its protecting

used to limit access between internet networks

a virus that runs as soon as the disk is started

method for testing all possible options

an act of hiding data within plain sight

an attack that uses multiple agents against a single victim

a fake website or service designed to be attacked by malficient actors for analysis

virus that leverages immediate response interpreted languages are designed around

to break apart an application to figure out how it works by generating the source code from the application’s object code and examining it

a defensive methodology that allows an entity to recover lost or damaged data

protocol used to prevent urls from getting spoofed to fake websites

an application method that uses personal characteristics ie fingerprints

a decentralized method for compiling a ledger that ensures integrity for the life of the ledger

small amount of data added to an encryption key or data to localize the encryption hash process

example of string cypher deprecated for security purposes

the act of purposely generating a collision by repeatedly executing a hash while adjusting the source data with a random ID

when an email that’s designed and sent to an unsuspecting victim to solicit them into taking a nefarious action

policy requires access defined for all subjects and resources

cryptography where sender and receiver share same key

an attack where the victim has their systems taken offline by encrypting the data as a form of extortion

IDS data collector that resides on the server it’s protecting

maleficent program that looks and acts like a benign program

security responsibility level that defines what should be done to implement desired security goals

cryptography using key pairs: one for encrypting and the other one for decrypting

policy model that supports integrity by limiting information flow from higher to lower security levels

a form of social engineering where a series of texts or emails are used to gain the confidence of a potential victim

used when 2 parties don’t share a trusted third party

attack where program resides in the background until a specific set of fact occur

cryptographic process that moves parts of the message around

security protocol used in VPNs

security responsibility level where goals & objectives are defined

security protocol used by webservices

defines access from the perspective of the subjects that desire resources

maleficent code that attaches itself to other files to travel & propagate

method that uses shared party secrets to generate a secret key

how a key is validated to belonging to an owner

function that takes a packet of any size data and derives a pattern with a limited number of bits that labels that package

method for validating who sent a message

cypher that operates one character at a time

application layer protocol that ensures secrecy regardless of the remaining network security

different cypher methods of using feedback to increase security & robustness

policy model that restricts confidentiality that has information flow from the lower to the higher security levels

virtual network of servers designed to be attacked for analysis by testing methodologies

IDS model for finding known viruses by comparing files hashes to signature libraries

method of validating a resource locally with no outside 3rd party