CIS Module 6: Privacy

Location Services

A feature on smartphones that contains the current location of the device.

Mobile Advertising Identifier

A unique number that identifies a specific device. (not only in smartphones but also tablets, consoles, and more)

Mobile Advertising Identifier

A unique number that identifies a specific device.

Surveillance-based Advertising

Internet-based digital advertising that is targeted to individuals who have been pre-identified through smartphone tracking data.

Communications Assistance for Law Enforcement Act

A wiretapping law passed in 1994 designed to enhance the ability of law enforcement agencies to conduct lawful interception

Cryptography

The practice of transforming information so that it cannot be understood by unauthorized parties and thus is secure.

Encryption

The cryptographic process of changing the original text into a scrambled message.

Decryption

The cryptographic process of changing a scrambled message back into the original text.

Plaintext

Unencrypted data that is input for encryption or the output of decryption.

Ciphertext

The scrambled and unreadable output of encryption.

Cleartext

Unencrypted data that is not intended to be encrypted.

Data in Processing

Data on which actions are being performed by devices such as printing a report from a device.

Data in Transit

Actions that transmit the data across a network.

Data at Rest

Data stored on electronic media.

Symmetric Cryptography

Cryptography that uses the same key to encrypt and decrypt data.

Asymmetric Cryptography

Cryptography that uses two keys.

Public Key

An asymmetric cryptographic key that is known to everyone and can be freely distributed.

Private Key

An asymmetric cryptographic key known only to the individual whom it belongs.

Full Disk Encryption

Cryptography that can be applied to entire disks instead of individual files or groups of files.

Self-encrypting Drives

Hard drives that can cryptographically protect all files stored on the device.

Hardware Security Module

A removable external cryptographic hardware device.

Trusted Platform Module

A chip on the motherboard of the computer that provides cryptographic services.

Digital Certificate

A technology used to associate a user’s identity to a public key and that has been digitally signed by a trusted third-party.

Code signing Digital Certificate

A digital certificate used by software developers to a digitally sign a program to prove that the software comes from the entity that signed it and no unauthorized third-party has altered or compromised it.

Email Digital Certificate

A digital certificate that allows a user to digitally sign and encrypt email messages.

End-to-End Encryption

Encryption that protects messages in transmit from the sender to the receiver.

Transport Layer Security

Encryption that protects messages only as they travel from the user’s device to the app’s servers, and then from the app’s servers to the recipient’s device.

Cookie

User-specific info in a file stored on the user’s computer and retrieved by a web server.

First-party cookie

A cookie created from the website that a user is currently viewing.

Third-Party Cookie

A cookie from a website other than the original site.

Session Cookie

A cookie stored in RAM, instead of on the hard drive, and only lasts for the duration of visiting the website.