FBLA - Cybersecurity

Based off of the current study guide and Maryland FBLA's quizlet

Term

Definition

Adware

Any software that displays advertising banners during use. Often includes code that tracks user info and passes it to third parties without consent.

Alert

Notification indicating an attack is directed at an organization's information system.

Application Backdoor

Hidden access to a program that allows control over it.

Attack

Intentional attempt to bypass security controls of a system.

Audit Trail

A record showing who accessed a system and what actions they performed.

Authenticate

To verify the identity of a user, device, or data integrity.

Authentication

A process to verify the validity of a transmission, message, or user.

Back Door

Hidden software or hardware used to bypass security controls.

Backup

A copy of data or applications stored separately for recovery in case of data loss.

Blended Threat

A network attack that combines virus and worm characteristics and exploits system vulnerabilities.

Bots

Remote-controlled agents on infected systems, often used for Distributed Denial of Service (DDoS) attacks or spamming.

Broadband

High-speed network connection, typically over 1 Mbps.

Browser Settings

Strategies to manage risks from active content while enabling trusted websites.

Certification

Evaluation of a system's technical and non-technical security features, supporting accreditation.

Ciphertext

Encrypted data that is unreadable without the decryption key.

Configuration Management

Tracking and approving changes to a system's configuration.

Contingency Plan

A plan for emergency response, backup operations, and disaster recovery to maintain critical resources.

Cookie

A small piece of data stored on a user’s device for future access by a web server.

Countermeasures

Actions or techniques to reduce vulnerabilities of a system.

Data-Driven Attack

Encoded attacks executed through data, potentially bypassing firewalls.

Data Integrity

The accuracy and consistency of data, protected from unauthorized alterations.

Denial of Service

Actions that prevent a system or service from functioning.

Dial-Up

Remote connection to a computer system via telephone lines.

Dictionary Attack

A brute-force attack using a list of common words to guess passwords.

Digital Signature

A verification method to ensure an email message is authentic and unchanged.

Distributed Tool

A tool that is distributed across multiple hosts to perform coordinated attacks.

DNS Spoofing

Corrupting a DNS server’s cache to redirect users to fraudulent websites.

DSL

High-speed internet connection providing dedicated bandwidth to users.

E-mail Attachment

Files sent with emails that may contain malware.

E-mail Bombs

Mass emails sent to overwhelm and disable email servers.

Encryption

The process of converting data into a secret code to protect its confidentiality.

EULA

Software contract that users must agree to before using the software.

Firewall

A system that blocks unauthorized access to a network, protecting private systems from external threats.

Flooding

A Denial of Service (DoS) attack involving high volumes of data to disrupt system functionality.

FTP

File Transfer Protocol, used to upload or download files from a server.

Gateway

A network device that connects two networks, enabling communication between them.

Hacker

An unauthorized individual attempting to gain access to a computer system.

HTTP

Hypertext Transfer Protocol, used for transferring web data.

ICMP

Internet Control Message Protocol, used for exchanging routing information between routers.

Instant Messaging

Real-time communication using text-based messaging over the internet.

Internet

A global network connecting millions of computers.

Intranet

A private network within an organization, accessible only to authorized users.

Intrusion

Unauthorized access to or manipulation of a system.

IP

Internet Protocol, used for addressing and routing data across networks.

IP Addresses

Unique addresses assigned to devices on a network to enable communication.

ISP

Internet Service Provider, the entity that provides internet access.

Keywords

Predefined terms used to filter or block access to certain websites.

Macros

Automated tasks in a program that can be activated with a shortcut.

Malicious Code

Software designed to perform unauthorized actions on a system.

Management Controls

Security measures focused on system and risk management.

Mobile Code

Software modules downloaded and executed remotely on a system, potentially malicious.

Operating System Bugs

Flaws or vulnerabilities in an operating system that can be exploited.

Operation Controls

Security measures focused on user interactions and operational processes.

Packet

A block of data transmitted across a network.

Packet Filtering

Technique for controlling data flow based on pre-established rules.

Packet Sniffer

A tool for monitoring data traffic between networked computers.

Patches

Updates that fix vulnerabilities or improve a program.

Pharming

A technique to redirect users to fraudulent websites, even when the correct URL is typed.

Phishing

Tricking users into revealing sensitive information through malicious websites or emails.

Ports

Network entry points that can be closed or filtered to control data flow.

Probe

An attempt to gather information about a system to bypass its security.

Protocols

Rules that define how data is transmitted across a network.

Proxy

Software that acts on behalf of another system to hide its details.

Proxy Server

A server that intermediates network requests, typically for web browsing.

RADIUS

Authentication system used by ISPs for verifying login credentials.

Redirect Bombs

Attacks that mislead or reroute network traffic to malicious destinations.

Remote Access

Connecting to a system remotely via communication lines.

Remote Login

Connecting to a system via the internet, typically for managing tasks or accessing files.

Replicator

A program that copies itself, often a virus or worm.

Retro-virus

A virus that spreads to backup media, making system restoration impossible.

Risk Analysis

Identifying and evaluating security risks to determine necessary safeguards.

Risk Management

Managing, controlling, and reducing risks to IT resources.

Rootkit

A collection of tools used by attackers to hide their presence and control a system.

Security Incident

An event indicating a potential or actual breach of security.

Security Plan

A document detailing security controls for a system.

Security Specifications

Requirements for safeguarding a system.

Sensitive Data

Information whose loss or misuse could have significant consequences, such as national security or privacy concerns.

Smart Card

A card with embedded microelectronics used for secure identification.

SMTP

Simple Mail Transfer Protocol, used for sending email.

SMTP Session Hijacking

Taking control of an active email session to send spam or malicious emails.

Smurfing

DoS attack using ICMP to flood a network and cause disruption.

SNMP

Simple Network Management Protocol, used for monitoring and managing devices on a network.

Source Routing

Technique allowing the sender of a packet to control its path through a network.

Spam

Unsolicited and often irrelevant or commercial emails sent to large groups of recipients.

Spim

Spam sent through Instant Messaging services.

Spoofing

Using false credentials to impersonate another user or system.

Spyware

Software that secretly collects user information without consent.

Stateful Inspection

A firewall technique that examines packet details to determine if they are trustworthy.

System Integrity

The assurance that a system performs as expected without unauthorized interference.

TCP

Transmission Control Protocol, a fundamental protocol for data transfer on the internet.

Telnet

A protocol for remotely accessing and controlling computers over a network.

Threat

Any event or action with the potential to harm a system or its data.

Trojan Horse

A malicious program disguised as legitimate software to gain unauthorized access or cause harm.

UDP

User Datagram Protocol, used for transmitting data that does not require a response, like streaming media.

Virus

A self-replicating program that spreads by attaching itself to files or applications.

Vulnerability

A weakness in a system that can be exploited to gain unauthorized access or cause disruption.

Web Bugs

Small elements on web pages or in emails that track user behavior without their knowledge.

Worm

A self-replicating program that spreads over networks, often causing network congestion and system damage.