Module 1: Introduction to Information Security

Vocabulary flashcards covering Module 1: Introduction to Information Security from CompTIA Security+ Guide to Network Security Fundamentals (8th Edition).

Security

The state of being free from danger (the goal of security), as well as the measures taken to ensure safety (the process of security).

Relationship of Security to Convenience

The principle that as security is increased, convenience is often decreased, creating an inversely proportional relationship between security and ease of use.

Confidentiality

A security protection principle ensuring that only approved or authorized individuals may access or view protected information.

Integrity

A security protection principle ensuring that information is correct and unaltered.

Availability

A security protection principle ensuring that information is accessible to authorized users when needed.

Authentication

The act of ensuring that a user's credentials are authentic.

Authorization

The access control process that grants permission for a user to take a particular action.

Accounting

The process of creating a preserved record of who accessed the network, what resources they accessed, and when they disconnected from the network.

Security Control

A safeguard employed within an enterprise to protect the CIA (confidentiality, integrity, availability) of information.

Deterrent Controls

Security controls intended to discourage unwanted activity.

Preventive Controls

Security controls intended to prevent unwanted events or actions from occurring.

Detective Controls

Security controls intended to detect unwanted activity or events.

Compensating Controls

Alternative security controls used when a primary security control cannot be implemented.

Corrective Controls

Security controls intended to correct or remediate an unwanted condition or event.

Directive Controls

Security controls that direct or guide users toward desired security behavior.

Cybersecurity

A range of practices, processes, and technologies intended to protect devices, networks, and programs that process and store data in an electronic form.

Information Security

The protection of processed data that is essential in an enterprise environment.

Information Security Layers

Concentric defense layers protecting core CIA data (whether transmitted, stored, or processed), consisting of Products, People, and Policies and procedures.

Threat Actor

An individual or entity responsible for cyberattacks; also commonly referred to as an attacker.

Unskilled Attackers

Individuals who want to perform cyberattacks yet lack the technical knowledge to carry them out, utilizing freely available or low-cost easy-to-use attack tools.

Shadow IT

The process of bypassing corporate approval for technology purchases, often driven by an ethical motivation but nevertheless weakening security.

Organized Crime

A close-knit group of highly-centralized enterprises set up for engaging in illegal activities, which has moved into cyberattacks for financial gain.

Insider Threats

Cybersecurity threats originating from a company's own employees, contractors, and business partners, often motivated by revenge or blackmail.

Hacktivists

Groups or individuals strongly motivated by ideology or principles who launch cyberattacks to cause disruption, chaos, or make political statements.

Nation-State Actors

State-sponsored attackers employed by governments to launch cyberattacks against foes, frequently involved in multiyear intrusion campaigns targeting sensitive data.

Advanced Persistent Threat (APT)

A class of complex cyberattacks that use innovative tools to silently extract data over an extended period of time.

Competitor Threat Actor

A threat actor launching attacks against an opponent's systems to steal classified information, product research, or customer lists for competitive advantage.

Broker

A threat actor who uncovers software weaknesses and sells knowledge of them to the highest bidder or governments rather than reporting them to the software vendor.

Cyberterrorist

A threat actor who attacks a nation's network and computer infrastructure to cause disruption and widespread panic among citizens.

Attack Surface

A digital platform that threat actors target for their exploits; also known as a threat vector.

Supply Chain

A network that moves a product from its creation to the end-user, where each link can serve as a potential threat vector.

Supply Chain Infection

The injection of malware into a product during its manufacturing, storage, or distribution phases.

Open-Source Software

Software whose source code is freely available for anyone to use without restrictions, which can be targeted by threat actors adding malicious code.

Vulnerability

The state of being exposed to the possibility of being attacked or harmed.

Software Vulnerabilities

Flaws or weaknesses predominantly found in software applications and operating system (OS) software.

Hardware Vulnerabilities

Hardware weaknesses that lead to successful attacks, including difficulty patching firmware, legacy platforms, and end-of-life (EOL) hardware.

Misconfiguration

Improperly implemented configuration settings that create security vulnerabilities within a system or network.

Zero-Day Vulnerability

A security vulnerability that can be exploited by attackers before anyone else knows it exists, providing zero days of advance warning.

Availability Loss

An impact of an attack where systems become inaccessible, leading directly to lost productivity and financial loss.

Data Loss

The destruction of data so that it cannot be recovered.

Data Exfiltration

Stealing data to distribute it to other parties.

Data Breach

Stealing data to disclose it in an unauthorized fashion.

Identity Theft

Taking personally identifiable information (PII) to impersonate someone else.

Information Security Framework

A series of documented processes used to define policies and procedures for implementing and managing security controls in an enterprise environment.

NIST Cybersecurity Framework (CSF) Functions

The five core cybersecurity functions defined by NIST CSF version 1.1: Identify, Protect, Detect, Respond, and Recover.

Regulatory Compliance

The process of adhering to mandatory regulations established by regulatory bodies.

Legislation

Specific laws enacted by national, territorial, or state governing bodies that provide information security standards and legal requirements.

Standard

A document approved through consensus by a recognized standardization body that provides rules, guidelines, or characteristics for products or processes.

Payment Card Industry Data Security Standard (PCI DSS)

An information security compliance standard designed to protect credit card and payment processing data.

Benchmark / Secure Configuration Guide

Platform- or vendor-specific guidelines distributed by hardware manufacturers and software developers for configuring a device or software to be resilient to attacks.

Request for Comments (RFC)

Documented white papers authored by technology bodies employing specialists, engineers, and scientists who are experts in specific technical areas.

Data Feed

A continually maintained database of the latest cybersecurity incidents, including vulnerability feeds.

Adversary Tactics, Techniques, and Procedures (TTP)

A database describing the behavior of threat actors and detailing how they manage and execute attacks.