IS322 Business Information Systems Vocabulary Review

Vocabulary flashcards covering topics from IS322 lectures, including Ethics & Social Impact, Telecommunications & Networks, and Information Security.

Computer Waste

The inappropriate use of computer technology and resources in both the public and private sectors.

Computer-Related Mistakes

Errors, failures, and other computer problems that make computer output incorrect or not useful, caused mostly by human error.

Cyberterrorist

Someone who intimidates or coerces a government or organization to advance political or social objectives.

Identity Theft and Assumption Deterrence Act of 1998

Federal legislation passed to fight identity theft, where an imposter obtains personal identification information to impersonate someone else.

Black Hat Hacker

Someone who violates computer or Internet security maliciously or for illegal personal gain.

Trojan Horse

A malicious program that disguises itself as a useful application or game and purposefully performs unexpected actions without replicating.

Logic Bomb

A type of Trojan horse that executes when specific conditions occur.

Ransomware

Malware that stops users from using their computer or accessing data until specific demands are met, such as paying a ransom or sending photos.

Blended Threat

A sophisticated threat that combines the features of a virus, worm, Trojan horse, and other malicious code into a single payload.

Distributed Denial-of-Service Attack

An attack in which a malicious hacker takes over computers via the Internet and causes them to flood a target site with demands for data and small tasks.

Computer Fraud and Abuse Act of 1986

Federal law that determines punishment for computer crimes based on the victim's dollar loss.

Intrusion Detection System (IDS)

Software that monitors system and network resources and notifies network security personnel when it senses a possible intrusion.

Ergonomics

The science of designing machines, products, and systems to maximize safety, comfort, and efficiency of the people who use them.

Telecommunications Protocol

Defines a set of rules that governs the exchange of information over a communications medium.

Synchronous Communications

A mode of communication where the receiver gets the message instantaneously.

Simplex Channel

A telecommunications channel that transmits data in only one direction.

Half-Duplex Channel

A telecommunications channel that transmits data in either direction, but not simultaneously.

Full-Duplex Channel

A telecommunications channel that permits data transmission in both directions at the same time.

Broadband over Power Lines (BPL)

A technology that provides Internet access over standard high-voltage power lines.

Near Field Communication (NFC)

Short-range wireless connectivity technology designed for cell phones and credit cards to pay for purchases by waving within a few inches of point-of-sale terminals.

Ultra Wideband (UWB)

A wireless option that transmits large amounts of digital data over short distances of up to $30\,\text{feet}$ using a wide spectrum of frequency bands at speeds up to $400\,\text{Mbps}$.

Distributed Processing

A processing alternative where processing devices are placed at remote locations but connected to each other via a network.

Router

A telecommunications hardware device that forwards data packets across two or more distinct networks toward their destinations.

Gateway

A telecommunications hardware device that serves as an entrance to another network, such as the Internet.

Virtual Private Network (VPN)

A private network that uses a public network like the Internet to support secure, encrypted connections between remote users and a corporate network.

Voice over Internet Protocol (VoIP)

A technology that enables voice conversations to be converted into packets of data that can be sent over a data network.

Electronic Data Interchange (EDI)

A system that connects corporate computers among organizations to exchange documents directly without paper.

Internet of Things (IoT)

A network of physical objects embedded with sensors, processors, software, and connectivity capability to exchange data with device manufacturers, operators, and other devices.

Cloud Computing

A computing environment in which software and storage are provided as an Internet service and accessed by users via a Web browser.

Information Security

A well-informed sense of assurance that information risks and controls are in balance, protecting information from unauthorized access, modification, disruption, or destruction.

C.I.A. Triangle

A security model standard based on three critical characteristics of information: Confidentiality, Integrity, and Availability.

NSTISSC Security Model

An evaluation standard model for information security comprising 27 cells representing areas that must be addressed in the security process.

Bottom-Up Approach

A security implementation effort initiated by systems administrators using technical expertise, which often fails due to a lack of participant support and organizational staying power.

Top-Down Approach

A security implementation approach initiated by upper management that issues policies, dictates project goals, determines accountability, and uses a formal development life cycle.

Security Systems Development Life Cycle (SecSDLC)

A coherent program adapting the traditional SDLC to support specialized information security projects by identifying specific threats and creating controls.

Single Loss Expectancy (SLE)

The average dollar cost expected for each single incident of a particular type of financial loss.

Annual Rate of Occurrence (ARO)

An expression in decimal form of how frequently a specific type of loss is expected to occur within a given year.

Annual Loss Expectancy (ALE)

The estimated dollar value an organization expects to lose within a given year related to a specific threat, calculated as $\text{ALE} = \text{SLE} \times \text{ARO}$.

Cost Benefit (Security)

The net monetary benefit of implementing a security countermeasure, calculated using the formula $\text{Cost Benefit} = (\text{ALE}_{\text{pre}} - \text{ALE}_{\text{post}}) - \text{control cost}$.

Vulnerability

Weaknesses or faults in a system or protection mechanism that expose information to attack or damage.