50-3

performance monitor (PM)

Baiting. This attack is sometimes called a road apple

security analyzers for UNIX systems

security analyzers for Microsoft

first a service or resource verifies the client’s credentials, then the client verifies the resource’s credentials

hashing

you cannot

an encryption algorithm where a key is used only once

trusted platform module that goes with “bit locker” that generates keys and random numbers. Can be used to encrypt your drive or for digital rights management or to authenticate hardware

a hashing algorithm

secure hash algorithm

a hashing algorithm that creates weak passwords

a hashing algorithm authentication protocol

Reindale

AES

asymmetric

digital signature

RSA

AES

point-to-point protocol

it enables a work station to communicate to a server using a serial connection. It requires little configuration

secure key exchange

intrusion detection system

the symbolic name that identifies a domain, like www.everythingforcoffee.com usually associated with a company or other organization

host-based intrusion detection system

Digital signature algorithm, used only for authentication. Similar to RSA

AES

Symmetric encryption

Shared-key encryption

if the HVAC system goes out during summertime

SMTP

POP3

HTTPS

HTTP

HTTP over SSL

all people seem to need data processing, and please do not throw stale pizza away

role

to audit the person on vacation

privilege management infrastructure

MAC

DAC

access control list

deny

something you know, have and are

time sensitive

domain controller: a server that responds to security authentication requests

knowledge based authentication, i.e. Your mother’s maiden name

host names and their associated IP addresses

www

host

ARP table

IP address

people dare not throw salty pretzels away

data encryption standard

that they possess the same secret key

it’s three times slower than DES

a symmetric encryption scheme is where both parties use the same key for encryption and decryption

they don’t scale well when you have a large number of users

hackers with wireless laptops connecting to unprotected WLANs to access their resources

DoS attack where ping messages are broadcasted to an entire network on behalf of a victim computer, to flood him with responses

simple network management protocol which is vulnerable because it uses clear text. “v1” is much more vulnerable than “v2”. Someone who gains administrative control, can take over network connection devices.

In SPI, every time a packet is sent out of the computer, the firewall keeps track of it. When a packet comes back to the firewall, the firewall can tell whether the inbound packet is a reply to the packet that was sent out. This way the firewall can handle most network traffic safely without a complex configuration of firewall rules

trusted platform module is something that goes with Bit locker

virtual CPU on a server

in Cisco systems

for security logging on a DNS server

a hashing algorithm authentication protocol from Microsoft

Open vulnerability and assessment language. It’s a standard that uses an XML-based language for the storage and dissemination of security information.

it involves sending data by way of photons, which are polarized in one of four directions. Eavesdroppers cause detectable changes in orientation which prevents them from getting secret information.

a symmetric algorithm using variable key lengths

the first successful algorithm designed for public key encryption

Java

secure FTP, which is a SSH-encrypted version of FTP protocol

secure hash algorithm modeled after MD5

virtual machine component that monitors and manages the various virtual instances

intrusion detection system which scans, audits and monitors the security infrastructure for signs of attacks in progress

the internet engineering task force

blocks everything and only allows explicitly granted permissions

tool used for allowing users to go to approved business-related websites only

Internet security association and key management protocol. They define procedures for authenticating computing peers, security associations, key generation techniques, and thread mitigation

Kerberos

PGP

cable that uses thicknet coaxial copper

it is the most recent addition of cryptography

a free 64-bit block cipher algorithm that uses variable key length

a weak form of encryption using symmetric keys

DES

Generic routing encapsulation point-to-point tunneling protocol to create private networks

removing data from storage media with reasonable assurance it can’t be retrieved and reconstructed

a symmetric encryption algorithm that processes each block of data three times with a different key each time

it has to do with “over the air” modulation techniques

a standard for port-based network access control for devices wishing to connect to a LAN

access control list is statements used by a router to permit or deny the forwarding of traffic on a network, based on one or more criteria

a symmetric block cipher for encryption. Uses private key. Rijndael is the most popular form

Address resolution protocol in the network layer. Relates MAC addresses to their IP addresses

process where attackers gain access to unauthorized information on a wireless device using a Bluetooth connection

certificate authority issuing and maintaining digital certificates as part of the public key infrastructure

Challenge handshake authentication protocol that operates over PPP. It requires the authenticator to take the first step by offering the other computer a challenge

certification revocation list, of certificates that are no longer valid

discressionary access control, where access is controlled based on users identity. Objects are configured with a list of users that are allowed to access them