MIS301 Exam 2

burke kills us

computing hardware

physical components of tech

software

computer program or collection of programs; precise set of instructions that tells hardware what to do

operating system

software that controls computer hardware and establishes standards for developing and executing apps

application software

performs the work that users and firms are directly interested in accomplishing

applications

includes desktop apps, enterprise software, utilities, and other programs that perform specific tasks for users and orgs

user interface (UI)

mechanism through which users interact with computing devices

firmware

software stored on nonvolatile memory chips

embedded systems

special-purpose software designed and included inside physical products (often firmware)

desktop software

apps installed on personal computer, typically supporting tasks performed by single user

enterprise software

apps that address needs of multiple users throughout an org or work group

database management system (DBMS)

database software, software for creating, maintaining and manipulating data

software package

software product offered commercially by 3rd party

enterprise resource planning (ERP)

software package that integrates many functions of a business

customer relationship management (CRM)

system used to support customer- related sales and marketing activites

supply chain management (SCM)

systems that help a firm manage aspects of its value chain

business intelligence (BI) systems

systems that use data created by other systems to provide reporting and analysis for organizational decision making

distributed computing

form of computing where systems in diff locations communicate and collaborate to complete a task

server

program that fulfills the requests of a client

client

software program that makes requests of a server program

application server

software that houses and serves business logic for use and reuse by multiple apps

web services

small pieces of code that are accessed from the application server, and permit intraoperative machine-to-machine interaction over a network

service-oriented architecture (SOA)

robust set of Web services built around an org's processes and procedures

Application Programming Interface (API)

programming hooks/ guidelines, published by firms that tell other programs how to get a service to perform a task such as send/ receive data

electronic data interchange (EDI)

set of standards for exchanging messages containing formatted data btwn computer apps

extensive markup language (XML)

tagging lang that can be used to identify data fields made available for use by other apps

javascript object notation (JSON)

popular data interchange format; tech standard often used to format data when being sent/ received via APIs

programming language

provides standards, syntax, statements, and instructions for writing computer software

integrated development environment (IDE)

app that includes an editor, debugger, and compiler, among other tools

scripting language

programming tool that executes w/in an app; interpreted w/in their apps rather than compiled to run directly by microprocessor

software development methodologies

methods to divide tasks related to software creation and deployment up into tasks targeted at building better products w stronger PM guidelines and techniques

waterfall method

relatively linear sequential approach to software development

feature creep

expansion of the scope of project

agile development

developing work continually and iteratively; goal of more frequent product rollouts and constant improvement across smaller components of larger project

scrum

approach to organizing and managing agile project that breaks deliverables into "sprints" delivered in 1-6 week increments by teams of

total cost of ownership (TCO)

all costs associated w design, development, testing, implementation, documentation, training, and maintenance of software system

capability maturity model integration (CMMI)

process-improvement approach that can assist in assessing the maturity, quality, and development of certain organizational business processes. and suggest steps for their improvement

marginal cost

cost associated with each additional unit produced

open source software (OSS)

software that is free and where anyone can look at and potentially modify the code

cloud computing

replacing computing resources- either an org's or individual's hardware or software- with services provided over the internet

Software as a service (SaaS)

form of cloud computing where a firm subscribes to a 3rd party software and receives a service that is delivered online

virtualization

type of software that allows a single computer to function as if it were several diff computers, each running its own operating system and software

containers

type of virtualization that allows for shared operating systems for more resources saving and faster execution

virtual desktops

running an instance of a PC's software on another machine and delivering the image of what is executing to the remote device

vertical niches

vertical markets; products and services designed to target a specific industry

service level agreement (SLA)

negotiated agreement btwn customer and vendor

security-focused

"hardened"; tech products that contain particularly strong security features

scalability

ability to handle increasing workloads or easily expandable to manage workload increases

utility computing

firms develops its own software and then runs it over the Internet on a service provider's computers

platform as a service (PaaS)

delivers tools so an org can develop, test, and deploy software in a cloud

infrastructure as a service (IaaS)

offers a more bare-bones set of services that are an alternative to buying its own physical hardware

cloudbursting

use of cloud computing to provide excess capacity during periods of spiking demand

black swans

unpredicted, but highly impactful events

server farm

massive network of computer servers running software to coordinate their collective use

LAMP stack

acronym for Linux, Apache, MySQL, PHP

Linux

OSS operating system

data harvesters

cybercriminals who infiltrate systems and collect data for illegal resale

cash-out fraudsters

criminals who purchase assets from data harvesters to be used for illegal financial gain

botnets

hordes of surreptitiously infiltrated computers, linked and controlled remotely; zombie networks

distributed denial of service (DDoS)

attack where a firm's computer systems are flooded with thousands of seemingly legitimate requests; often performed via botnets

social engineering

con games that trick employees into revealing info or performing other tasks that compromise a firm

hacktivists

protester seeking to make a political point by leveraging tech tools, often through system infiltration, defacement, or damage

hacker

someone who breaks into computer systems or a particularly clever programmer

white hat hackers

someone who uncovers computer weaknesses without exploiting them

black hat hackers

computer criminals

malware signatures

sort of electronic fingerprint used to recognize malicious code

phishing

con executed using tech, typically targeted at acquiring sensitive info or tricking someone into installing malicious software

spoofed

term in security to refer to forging or disguising origin or identity

tokenization

security schemes that automatically send one-time use representations of a credit card which can be received and processed by banking and transaction firms at the time of payment

worms

destructive programs that replicate themselves without requiring another program to provide a safe environment for replication

SQL injection technique

example of an exploit where hackers target security vulnerabilities caused by software developers not validating user input

zero-day exploits

attacks that are so new that they haven't been clearly identified, and so they haven't made it into security screening systems

biometrics

tech that measure and analyze human body characteristics for id or authentication

multi factor authentication

when identity is proven by presenting more than 1 item for proof of credentials

voice print

tech that identifies users via unique characteristics in speech

push button hacking

tools designed to easily automate attacks

dumpster diving

combing through trash to identify valuable assets

shoulder surfing

gaining compromising info through observation

intrusion detection system

system that monitors network use for potential hacking attempts

encryption

scrambling data using a code, thereby hiding it from those who don't have the unlocking key

key

code that unlocks encryption

brute force attacks

exhausts all possible password combos to break into an account

public key encryption

two key system used to securing electronic transmissions

certificate authority

trusted third party that provides authentication services in public key encryption schemes

honeypots

seemingly tempting but bogus target meant to draw hacking attempts

whitelists

highly restrictive programs that permit communication only with approved entities and/or in an approved manner

blacklists

programs that deny entry or exit or specific IP addresses, products, Internet domains, and other communication restrictions

firewalls

system that acts as a control for network traffic, blocking unauthorized traffic while permitting acceptable use

big data

term used to describe the massive amt of data available to today's managers

business intelligence (BI)

term combining aspects of reporting, data exploration and ad hoc queries, and sophisticated data modeling and analysis

analytics

extensive use of data, statistical and quantitative analysis, explanatory and predictive models, and fact-based management to drive decisions and actions

machine learning

type of AI that leverages massive amts of data so computers can improve accuracy of actions and predictions on their own w/out additional programming

dynamic pricing

changing pricing based on demand conditions

data

raw facts and figures

information

data presented in a context so that it can answer a question or support decision making

knowledge

insight derived from experience and expertise (based on data and info)

database

single table or collection of related tables

table/file

list of data, arranged in columns (fields) and rows (records)

column/field

column in a table; represent each new category of data contained in a record

row/record

row in table; represent a single instance of whatever the table keeps track of

key (DBMS)

field or fields used to relate tables in a database