CyberNotes 2024

Authorization

The process of determining the least amount of access required by users.

Access Control

Methods used to manage who can access and use resources in a system.

CRUD

Create, Read, Update, Delete - basic operations for managing data.

DAC

Discretionary Access Control - users have the ability to control access to their own data.

MAC

Mandatory Access Control - access rights are regulated by a central authority based on multiple levels of security.

RBAC

Role-Based Access Control - access rights are assigned based on roles within an organization.

Private Cloud

A cloud computing environment managed by a single organization.

Public Cloud

Cloud services available for public use.

Hybrid Cloud

A combination of private and public cloud infrastructures.

IaaS

Infrastructure as a Service - provides virtualized computing resources over the internet.

PaaS

Platform as a Service - a platform allowing customers to develop, run, and manage applications.

SaaS

Software as a Service - software that is hosted in the cloud and accessed via the internet.

Cryptography

The practice of securing information by transforming it into an unreadable format.

Plaintext

Unencrypted text or information that is easy to read.

Ciphertext

Text that has been encrypted, making it unreadable without decryption.

Symmetric Key Cryptography

Encryption method using the same key for both encryption and decryption.

Asymmetric Key Cryptography

Encryption method using a different key for encryption and decryption.

Hash Function

A function that transforms data into a fixed-size string of characters, which is typically a hash value.

Malware

Malicious software designed to harm, exploit, or otherwise compromise computers.

Phishing

Fraudulent attempts to obtain sensitive information by disguising as a trustworthy entity.

Ransomware

Malware that encrypts a user's files and demands payment for the decryption key.

Botnets

Networks of bots, used collectively to perform unauthorized tasks.

SQL Injection

A method of attack that allows an attacker to execute arbitrary SQL code on a database.

Denial of Service (DoS)

An attack intended to shut down a machine or network, making it inaccessible to users.

Keylogger

A type of software or hardware that records keystrokes made by a user.

Rootkit

Malware designed to gain unauthorized root or administrative access to a computer.

Stuxnet

A worm believed to be created by the US and Israel to disrupt Iran's nuclear program.