ACL
Access controls lists specify the type of access granted or denied to a specific asset such as a network, server or file from a specific source.
Supplied by: Brian Contos
Adware
See spyware
Supplied by: secureIT
Air-gapped
An abstract used to define an architecture where internal systems/networks are not physically or logically connected to external systems/networks such as sensitive applications not being accessible from the Internet
Supplied by: Brain Contos
Back door
Piece of software that allows access to the computer system, bypassing normal authentication procedures
Supplied by: secureIT
Biometric Authentication
A method for using the physical characteristics of a person for authentication such as hand geometry, finger prints, retina patterns and voice.
Supplied by: Brian Contos, Arcsight
Blended threat
A program that combines the characteristics of viruses, worms and Trojan horses. A blended threat, such as the Nimda outbreak in 2005, is a recent phenomenon
Supplied by: secureIT
Browser hijacker
Program designed to alter a computer user's browser settings
Supplied by: secureIT
Defense-in-depth
A strategy for having multiple layers of security instead of a single point of failure such as deploying network-and host-based firewalls
Supplied by: Brian Contos
Exploit
Piece of software that attacks a particular vulnerability
Supplied by:
File extension
The three-letter code at the end of a file name that tells you what kind of file it is. Double extensions are often used to conceal viruses
Supplied by: secureIT
Firewall
Software application and/or hardware, which prevents unauthorised access to your computer from the Internet and prevents unauthorised programs sending information from your computer.
Supplied by: secureIT
Hackers
A term used to define an individual(s) who attempts to gain unauthorised access to computer systems for the purpose of stealing and/or corrupting data
Supplied by: secureIT
IDS
Intrusion Detection Systems are deployed on hosts or networks and attempt to detect malicious activity.
Supplied by: Brain Contos
Keystroke Loggers
Software that captures the keys pressed on your computer keyboard and sends a log of these to the hacker via the Internet. Used to capture your passwords and often included in Trojans.
Supplied by: secureIT
MAC (Media Access Control)
An address, unique to each computer's network interface adapter, often used as a layer of authentication in wireless security.
Supplied by: secureIT
Malware
Malicious software
Supplied by: secureIT
Mantraps
A physical security mechanism with at least two doors. After passing through the first door it must lock before the next door can be opened.
Supplied by: Brain Contos
Password sniffer
A program that seeks out passwords on your computer, then sends them to a hacker. A keylogger can grab anything typed on the keyboard.
Supplied by: secureIT
Pharming
Use of "poisoned" Internet routing to redirect users to a duplicate (but malicious) web site.
Supplied by: secureIT
Phishing
The use of 'spoofed'emails and fraudulent websites which are designed to trick recipients into divulging personal financial data such as credit card numbers, account usernames and PINs/passwords.
Supplied by: secureIT
Rogue dialer
Program that changes modern settings on a computer, so that network connection takes place via an expensive (toll) connection
Supplied by: secureIT
Root kit
Set of software tools frequently used by an intruder after gaining access to a computer system
Supplied by: secureIT
Social engineering
Obtaining confidential information by manipulating legitimate users.
Supplied by: secureIT
Spear phishing
Targeted phishing
Supplied by: secureIT
Spyware
Software installed as part of another application which is designed to monitor and report back on activity on a computer. Often installed without the users knowledge. May also be called scumware, adware or malware.
Supplied by: secureIT
Trojans
An apparently harmless program that contains malicious code designed to give control of your computer to a hacker. Can be used to record keystrokes (see keystroke logger) and delete files or even view your screen contents.
Supplied by: secureIT
Virus Definition Files
The list of known viruses that anti-virus software searches for on your computer or incoming files and emails. In order for anti-virus software to work effectively it is vital that you should keep your virus definition files as up to date as possible.
Supplied by: secureIT
Viruses
Software disguised as something else that can cause damage to data and systems. Often spread as email attachments or files hidden in disks.
Supplied by: secureIT
VPN
Virtual Private Networks allow encrypted communication across networks such as the Internet. While there are many uses, they were initially designed to allow a private tunnel between two public, Internet-separated location, thus allowing a secure and more cost effective alternative to private dedicated links for communication.
Supplied by: Brain Contos
Wabbit
Self-replicating, non-propagating code (uncommon)
Supplied by: secureIT
Warez
Copyrighted material traded in violation of its copyright license; generally refers to releases by organised groups.
Supplied by: secureIT
WEP
Wired Equivalent Privacy, a weak and easily cracked form of wireless network security.
Supplied by: secureIT
Worm
Similar to viruses in that they are programs that are often designed to interfere with the computes they infect. They don't attach themselves to files or other programs but spread automatically across networks of computers.
Supplied by: secureIT
WPA
Wi-Fi Protected Access, a fairly strong form of wireless network security.
Supplied by: secureIT
Zombie
A computer that has been compromised by a hacker/cracker, and is being used by that outside person to perform malicious (or at least illegal) activity unbeknown to the computer's owner.
Supplied by: secureIT