HOME
 IT Security News
 Thought Leadership Panel
 Case Studies & Resources
 Suppliers Guide
 Product Tests
 Free Downloads
 Competition
 Glossary of Terms
 IT Security Events
 Ask the Experts
 IT Security Newsletter
 
 '08 Media Information
 

   IT Security Terms and References

Go To Main Page




ACL
Access controls lists specify the type of access granted or denied to a specific asset such as a network, server or file from a specific source.
Supplied by:   Brian Contos

Adware
See spyware
Supplied by:   secureIT

Air-gapped
An abstract used to define an architecture where internal systems/networks are not physically or logically connected to external systems/networks such as sensitive applications not being accessible from the Internet
Supplied by:   Brain Contos

Back door
Piece of software that allows access to the computer system, bypassing normal authentication procedures
Supplied by:   secureIT

Biometric Authentication
A method for using the physical characteristics of a person for authentication such as hand geometry, finger prints, retina patterns and voice.
Supplied by:   Brian Contos, Arcsight

Blended threat
A program that combines the characteristics of viruses, worms and Trojan horses. A blended threat, such as the Nimda outbreak in 2005, is a recent phenomenon
Supplied by:   secureIT

Browser hijacker
Program designed to alter a computer user's browser settings
Supplied by:   secureIT

Defense-in-depth
A strategy for having multiple layers of security instead of a single point of failure such as deploying network-and host-based firewalls
Supplied by:   Brian Contos

Exploit
Piece of software that attacks a particular vulnerability
Supplied by:   

File extension
The three-letter code at the end of a file name that tells you what kind of file it is. Double extensions are often used to conceal viruses
Supplied by:   secureIT

Firewall
Software application and/or hardware, which prevents unauthorised access to your computer from the Internet and prevents unauthorised programs sending information from your computer.
Supplied by:   secureIT

Hackers
A term used to define an individual(s) who attempts to gain unauthorised access to computer systems for the purpose of stealing and/or corrupting data
Supplied by:   secureIT

IDS
Intrusion Detection Systems are deployed on hosts or networks and attempt to detect malicious activity.
Supplied by:   Brain Contos

Keystroke Loggers
Software that captures the keys pressed on your computer keyboard and sends a log of these to the hacker via the Internet. Used to capture your passwords and often included in Trojans.
Supplied by:   secureIT

MAC (Media Access Control)
An address, unique to each computer's network interface adapter, often used as a layer of authentication in wireless security.
Supplied by:   secureIT

Malware
Malicious software
Supplied by:   secureIT

Mantraps
A physical security mechanism with at least two doors. After passing through the first door it must lock before the next door can be opened.
Supplied by:   Brain Contos

Password sniffer
A program that seeks out passwords on your computer, then sends them to a hacker. A keylogger can grab anything typed on the keyboard.
Supplied by:   secureIT

Pharming
Use of "poisoned" Internet routing to redirect users to a duplicate (but malicious) web site.
Supplied by:   secureIT

Phishing
The use of 'spoofed'emails and fraudulent websites which are designed to trick recipients into divulging personal financial data such as credit card numbers, account usernames and PINs/passwords.
Supplied by:   secureIT

Rogue dialer
Program that changes modern settings on a computer, so that network connection takes place via an expensive (toll) connection
Supplied by:   secureIT

Root kit
Set of software tools frequently used by an intruder after gaining access to a computer system
Supplied by:   secureIT

Social engineering
Obtaining confidential information by manipulating legitimate users.
Supplied by:   secureIT

Spear phishing
Targeted phishing
Supplied by:   secureIT

Spyware
Software installed as part of another application which is designed to monitor and report back on activity on a computer. Often installed without the users knowledge. May also be called scumware, adware or malware.
Supplied by:   secureIT

Trojans
An apparently harmless program that contains malicious code designed to give control of your computer to a hacker. Can be used to record keystrokes (see keystroke logger) and delete files or even view your screen contents.
Supplied by:   secureIT

Virus Definition Files
The list of known viruses that anti-virus software searches for on your computer or incoming files and emails. In order for anti-virus software to work effectively it is vital that you should keep your virus definition files as up to date as possible.
Supplied by:   secureIT

Viruses
Software disguised as something else that can cause damage to data and systems. Often spread as email attachments or files hidden in disks.
Supplied by:   secureIT

VPN
Virtual Private Networks allow encrypted communication across networks such as the Internet. While there are many uses, they were initially designed to allow a private tunnel between two public, Internet-separated location, thus allowing a secure and more cost effective alternative to private dedicated links for communication.
Supplied by:   Brain Contos

Wabbit
Self-replicating, non-propagating code (uncommon)
Supplied by:   secureIT

Warez
Copyrighted material traded in violation of its copyright license; generally refers to releases by organised groups.
Supplied by:   secureIT

WEP
Wired Equivalent Privacy, a weak and easily cracked form of wireless network security.
Supplied by:   secureIT

Worm
Similar to viruses in that they are programs that are often designed to interfere with the computes they infect. They don't attach themselves to files or other programs but spread automatically across networks of computers.
Supplied by:   secureIT

WPA
Wi-Fi Protected Access, a fairly strong form of wireless network security.
Supplied by:   secureIT

Zombie
A computer that has been compromised by a hacker/cracker, and is being used by that outside person to perform malicious (or at least illegal) activity unbeknown to the computer's owner.
Supplied by:   secureIT

Advice for IT security within business  ©secureIT 2006 - 2008     Contact us | secureIT-online is maintained by Great White Limited
                                                             Seach Engine Optimisation and Pay Per Click Managment