COMP 1 Chapter 8: Computer Security Vocabulary

Vocabulary flashcards generated from COMP 1 Chapter 8 lecture notes covering fundamental computer security terms, operating system controls, data protection, and risk management principles.

Computer Security

The protection of computer systems, accounts, data, and networks from unauthorized access, damage, misuse, or interruption.

CIA Triad

The three core goals of security: Confidentiality, Integrity, and Availability.

Confidentiality

The goal of security focused on keeping information private.

Integrity

The goal of security focused on keeping information correct.

Availability

The goal of security focused on keeping systems usable.

Control

A protection mechanism that reduces the chance or impact of a security threat.

Least Privilege

The security concept stating that users should only have the exact access permissions needed to perform their work.

Admin Account

An account type used to install software, change system settings, and manage users.

Standard Account

An account type for safer daily use that allows using apps and files without full system control.

Antivirus (AV)

A security tool that scans files and behavior for known or suspicious threats.

Firewall (FW)

A security tool that controls network traffic going into or out of a device.

App Permissions

Settings that limit what apps are allowed to access, such as camera, microphone, location, and files.

Device Hardening

The process of reducing unnecessary system weaknesses before security problems happen.

Multi-Factor Authentication (MFA / 2FA)

An account protection method that adds extra authentication factors beyond a password, categorized into something you know, something you have, and something you are.

Encryption

The process of turning readable data into protected data that requires the correct key or password to decode.

HTTPS

Hypertext Transfer Protocol Secure; helps protect data in transit across websites, but does not automatically prove a site is legitimate.

Risk Management Cycle

A four-step professional process to handle risks consisting of Identify, Assess, Reduce, and Respond.

Risk Matrix

A tool used to prioritize security risks by measuring Likelihood against Impact.