INFO ASSURANCE PRELIMS

Cybersecurity

The practice of protecting systems, networks, and programs from digital attacks.

Security Architect

An individual responsible for maintaining the security of a company’s computer system.

Security Consultant

An advisor and supervisor for all security measures necessary to effectively protect a company or client’s assets.

Ethical Hacker

A hacker who uses their skills for ethical purposes, also referred to as a white hat hacker.

Chief Information Security Officer (CISO)

The individual responsible for an organization’s information and data security.

Ransomware

A type of malicious software designed to extort money by blocking access to files or the computer system until a ransom is paid.

Malware

Software designed to gain unauthorized access or cause damage to a computer.

Social engineering

A tactic used to trick a user into revealing sensitive information.

Phishing

The practice of sending fraudulent e-mails that resemble those from reputable sources.

Crypting services

Services used for encrypting malware to obscure and make the data difficult to detect.

Crimeware

The buying and selling of malware on the Dark Web.

Remote administration tools

A type of malware that grants hackers control over the infected computer.

Keyloggers

Malware that tracks keystrokes to eavesdrop on conversations and steal login credentials.

Exploit kits

Tools that target users visiting what they believe to be a trusted site but are redirected to a malicious one.

Leaked data

Data stolen from a user’s machine that can be easily sold on the Dark Web.

Card skimmers

Devices implanted in POS machines or ATMs to steal identity and credit card information.

Unpatched systems

Systems with vulnerabilities that can be resolved through the application of software patches.

Hardware authentication

A method to improve security by ensuring that weak passwords and usernames are not used.

Cloud technology

Technology that significantly impacts the transformation of systems security.

Deep learning

A field encompassing technologies like machine learning and artificial intelligence.

The Anatomy of a Cyberattack: Step 1

Reconnaissance, where hackers gather information about the target organization.

The Anatomy of a Cyberattack: Step 2

Attack, where hackers gain access to the network.

The Anatomy of a Cyberattack: Step 3

Expansion, where hackers intrude into all systems on the network.

The Anatomy of a Cyberattack: Step 4

Obfuscation, where hackers hide their tracks to mask the origins of the attack.