COMP 1 Chapter 8: Computer Security Flashcards

Vocabulary flashcards generated from COMP 1 Chapter 8 lecture notes on Operating System Security, Accounts, Cybersecurity, and Risk Management.

Computer Security

The protection of computer systems, accounts, data, and networks from unauthorized access, damage, misuse, or interruption.

CIA Triad

The three core goals of security decisions, consisting of Confidentiality, Integrity, and Availability.

Confidentiality

The goal of keeping information private.

Integrity

The goal of keeping information correct.

Availability

The goal of keeping systems usable.

Control

A protection mechanism that reduces the chance or impact of a threat.

Least Privilege

The security principle that users should only have the specific access they need to perform their work.

Admin Account

An account type with elevated privileges used to install software, change system settings, and manage other users.

Standard Account

A daily-use user account that permits using apps and files without giving full system control.

Updates and Patches

Software maintenance releases that fix bugs, close security holes, and improve system stability.

Antivirus (AV)

A security tool that scans files and software behavior for known or suspicious threats.

Firewall (FW)

A security tool that controls incoming and outgoing network traffic on a device.

App Permissions (AP)

Controls that limit what device resources (such as camera, microphone, location, and files) an app can access.

Device Hardening

The practice of reducing unnecessary system weaknesses before problems occur.

Multi-Factor Authentication (MFA / 2FA)

An account defense mechanism requiring additional proofs beyond a password, combining something you know, something you have, and something you are.

Encryption

The process of converting readable data into protected data that requires the correct key or password to access.

3-2-1 Backup Rule

A data recovery best practice specifying 3 copies of data, across 2 storage types, with 1 off-device or cloud copy.

HTTPS

Hypertext Transfer Protocol Secure, a protocol that protects data in transit across web connections.

Risk Management Cycle

A professional four-stage process consisting of Identify, Assess, Reduce, and Respond.

Risk Matrix

A decision framework used to prioritize security risks by evaluating Likelihood against Impact.