BCIS 4630 Exam 1 - CIA & Security Foundations Flashcards

Vocabulary flashcards covering information security foundations, attacker types, networking basics, and cryptographic principles for BCIS 4630 Exam 1.

CIA

Stands for Confidentiality, Integrity, and Availability.

Confidentiality

The practice of protecting information from unauthorized access or disclosure.

Disclosure

The loss of confidentiality.

Integrity

The practice of protecting information from unauthorized changes.

Alteration

The loss of integrity.

Availability

Ensuring systems and information are accessible when needed.

Denial

The loss of availability.

DAD

An acronym representing Disclosure, Alteration, and Denial.

White hat hacker

An ethical hacker or security professional.

Black hat hacker

A malicious hacker or criminal.

Gray hat hacker

A hacker positioned between white and black hat who may violate rules without malicious intent.

Script kiddie

Someone who uses hacking tools created by others while possessing little technical knowledge.

AAA

Stands for Authentication, Authorization, and Accounting.

Authentication

The process of verifying an identity.

Authorization

The process of determining what an authenticated user is permitted to access or do.

Accounting/Auditing

The practice of tracking user actions and activities.

Least Privilege

The security principle of giving only the minimum permissions necessary.

Transport Layer PDU

The Protocol Data Unit for this layer is the Segment (TCP) or Datagram (UDP).

Encapsulation

The process of adding headers and trailers as data moves down the OSI layers.

DNS

Domain Name System; it resolves domain names to IP addresses.

ARP

Address Resolution Protocol; it resolves IP addresses to MAC addresses.

MAC Address

A unique $48$-bit hardware address.

HTTP Port

TCP port $80$.

HTTPS Port

TCP port $443$.

DNS Port

TCP/UDP port $53$.

TCP

A protocol that guarantees delivery.

UDP

A best-effort only protocol.

Forward Acknowledgment

A method of acknowledging data by requesting the next expected segment.

Symmetric Encryption

Encryption that uses the same key for both encryption and decryption.

Asymmetric Encryption

Encryption that uses a public key and a private key.

AES

A symmetric encryption algorithm.

RSA

An asymmetric encryption algorithm.

Hash Function

A function that converts data into a fixed-size output.