ISMN test 2 key terms

Four ethical categories

Privacy, Accuracy, Property, Accessibility.

Geofencing

A virtual geographic boundary that triggers a response when a device enters or leaves an area.

Photo-tagging

Assigning names to images and using facial recognition to find matches.

Essential cookies

Cookies necessary for website functionality.

Performance/analytics cookies

Cookies that measure website usage.

Functional cookies

Cookies that remember user preferences.

Advertising/targeting cookies

Cookies that support personalized advertising.

First-party cookies

Cookies set by the website being visited.

Third-party cookies

Cookies set by another entity that may track users across websites.

Web beacons

Tiny graphic elements used to monitor behavior.

Session replay scripts

Scripts that record website interactions.

Privacy laws

GDPR, Brazilian Data Protection Law, and CCPA.

Threat

A danger to an information resource.

Exposure

Potential harm, loss, or damage if a threat compromises a resource.

Vulnerability

The possibility that a threat will cause harm.

Two threat categories

Unintentional threats and deliberate threats.

Social engineering

Manipulating people to obtain confidential information or access.

Virus

Malware that can damage programs and files.

Worm

Malware that self-replicates and spreads.

Ransomware

Software that blocks access or encrypts data and demands payment.

Botnet

A collection of infected computers controlled by a remote attacker.

DDoS

An attack that floods a target with malicious traffic to make it unusable.

Phishing

Deceptive messages used to obtain sensitive information.

Spear phishing

Phishing that targets specific individuals or organizations.

Whaling

Phishing that targets high-value individuals.

Spyware

Software that collects personal information without consent.

SCADA

Systems that monitor or control industrial and critical infrastructure processes.

Cyberterrorism

Cyberattacks typically carried out by individuals or groups.

Cyberwarfare

Cyberattacks carried out or sponsored by countries or government entities.

Three security controls

Physical controls, access controls, and communications controls.

Three risk mitigation strategies

Risk acceptance, risk limitation, and risk transference.

Three risk analysis steps

Assess asset value; estimate the probability of compromise; compare potential loss with protection costs.