click below
click below
Normal Size Small Size show me how
Cyber Security
Term | Definition | |
---|---|---|
Cyber Crime | efforts by bad actors to profit from their malicious attacks. . | |
Disrubtion | attempts to disrupt the operations of organizations by attacking their IT and operational technology (OT) infrastructure to damage it, temporarily shut it down, or hold it for ransom. | |
Espionage | cyberattacks backed by state agencies that are part of broader espionage and military activities. | |
Phishing | target people to steal login and other confidential information by trying to trick them into clicking malicious links in emails, message apps, or on the web. | |
Spear Phishing | is a highly targeted variant of Phishing that uses a pretend email or message from an important individual to trick a person within the same or a partner organization. | |
Malware | Malware is malicious software designed to infect IT systems and cause damage or compromise data security. | |
Malware attacks | come in many forms, such as viruses, worms, trojans, adware, spyware, ransomware, and more. | |
Ransomware | is a form of malware that encrypts data on infected IT systems. | |
Man In The Middle Attack | occurs when cybercriminals intercept and alter network traffic flowing between IT systems. | |
Denial of Service | aims to disrupt a service being provided on the network by flooding the targeted systems or applications with so many requests that the servers cannot respond to them all. | |
Botnets | widespread groups of devices that have been compromised and hijacked by cybercriminals in order to use them to target IT systems with DDoS attacks or other attack types. Botnet is a portmanteau of the words robot and network. | |
Adware | software that displays unwanted ads on end-user devices to generate revenue from advertisers. | |
Crypto-Jacking | a type of malware that uses the resources of the infected IT systems to 'mine' for cryptocurrencies. | |
Insider Treats | Not all cyber threats originate from external sources. Data and other sensitive information like login credentials can leak from inside organizations. Either via malicious activity by staff, or more frequently due to a mistake | |
OWASP Top Ten | Other types of cyberattacks exist. For example, SQL Injection and other injection attacks, cross-site scripting, and more. The OWASP Top 10 lists the most prevalent technical level attack methods that are in use. It is updated every few years. | |
Cloud | A technology that allows us to access our files and/or services through the internet from anywhere in the world. Technically speaking, it’s a collection of computers with large storage capabilities that remotely serve requests. | |
Software | A set of programs that tell a computer to perform a task. These instructions are compiled into a package that users can install and use. For example, Microsoft Office is an application software. | |
Domain | A group of computers, printers and devices that are interconnected and governed as a whole. For example, your computer is usually part of a domain at your workplace. | |
Virtual Private Network (VPN) | A tool that allows the user to remain anonymous while using the internet by masking the location and encrypting traffic. | |
IP Address | An internet version of a home address for your computer, which is identified when it communicates over a network; For example, connecting to the internet (a network of networks). | |
Exploit | A malicious application or script that can be used to take advantage of a computer’s vulnerability. | |
Firewall | A defensive technology designed to keep the bad guys out. Firewalls can be hardware or software-based. | |
Virus | A type of malware aimed to corrupt, erase or modify information on a computer before spreading to others. However, in more recent years, viruses like Stuxnet have caused physical damage. | |
Trojan Horse | A piece of malware that often allows a hacker to gain remote access to a computer through a “back door”. | |
Worm | A piece of malware that can replicate itself in order to spread the infection to other connected computers. | |
Spyware | A type of malware that functions by spying on user activity without their knowledge. The capabilities include activity monitoring, collecting keystrokes, data harvesting (account information, logins, financial data), and more. | |
Rootkit | Another kind of malware that allows cybercriminals to remotely control your computer. Rootkits are especially damaging because they are hard to detect, making it likely that this type of malware could live on your computer for a long time. | |
Encryption | The process of encoding data to prevent theft by ensuring the data can only be accessed with a key. | |
Pen-Testing | Short for “penetration testing,” this practice is a means of evaluating security using hacker tools and techniques with the aim of discovering vulnerabilities and evaluating security flaws. | |
Click Jacking | A hacking attack that tricks victims into clicking on an unintended link or button, usually disguised as a harmless element. | |
Deepfake | An audio or video clip that has been edited and manipulated to seem real or believable. | |
White Hat/Black Hat | When speaking in cyber security terms, the differences in hacker “hats” refers to the intention of the hacker. For example: | White hat: Breaches the network to gain sensitive information with the owner’s consent – making it completely legal. This method is usually employed to test infrastructure vulnerabilities. |
Black hat: Hackers that break into the network to steal information that will be used to harm the owner or the users without consent. It’s entirely illegal. |