Network Security Exam 1

Computer Security

The protection of automated information systems to maintain integrity, availability, and confidentiality of resources.

CIA Triad

The foundation of information security consisting of Confidentiality, Integrity, and Availability.

Passive Attacks

Attempts to gather information without affecting system resources (e.g., eavesdropping).

Active Attacks

Attempts to alter system resources or disrupt their operation (e.g., masquerade, denial of service).

Authentication

Verifying the authenticity of communication and claimed sources.

Data Confidentiality

Protecting data from passive attacks like eavesdropping.

Non-repudiation

Preventing denial of transmitted messages by sender or receiver.

Attack Surface

Reachable vulnerabilities in a system that can be exploited by attackers.

Symmetric Encryption

Uses the same secret key for encryption and decryption.

Public-Key Encryption

Utilizes two different keys (public and private) for encryption and decryption.

Digital Signatures

Provide authentication and non-repudiation using public-key cryptography.

User Authentication

Verifying a user's identity for access control and accountability.

SSL/TLS Protocols

Ensure secure communication over the internet, including HTTPS for web traffic.

DNS (Domain Name System)

Resolves domain names to IP addresses and is vulnerable to security threats like hijacking.

SSH (Secure Shell)

Protocol for secure remote access and tunneling capabilities.

TCP/IP Network Model

Defines the layered architecture for network communication with specific functions for each layer.