click below
click below
Normal Size Small Size show me how
Security+ Software
Security+ Flash Cards - Software Terms
Term | Definition | Explanation |
---|---|---|
API | Application Programming Interface | |
ASLR | Address Space Layout Randomization | ASLR helps prevent exploitation of memory by randomly arranging the memory locations used by a program or process. |
BIOS | Basic Input/Output System | |
CMS | Content Management System | "CMS is a software application or set of related programs that are used to create and manage digital content. Examples are: Joomla, Drupal, and Squarespace. |
DEP | Data Execution Prevention | DEP is a system-level memory protection feature built into the Windows operating system. DEP marks pages of memory as non-executable. This means code cannot be run from those regions of memory. This makes it harder for buffer overruns to occur through exploitation. |
DLL | Dynamic Link Library | |
EFS | Encrypted File System | |
FACL | File System Access Control List | |
GPO | Group Policy Object | |
HIDS | Host-based Intrusion Detection System | |
HIPS | Host-based Intrusion Prevention System | |
IIS | Internet Information Services | "IIS for Windows Server is a flexible, secure and manageable Web server." |
NTFS | New Technology File System | |
NTLM | New Technology LAN Manager | |
OS | Operating System | |
PCAP | Packet Capture | .pcap is the Wireshark filename extension for packet captures. |
RTOS | Real-time Operating System | |
SDK | Software Development Kit | |
SDLC | Software Development Life Cycle | |
SDLM | Software Development Life Cycle Methodology | |
SEH | Structured Exception Handling | Structured exception handling is a mechanism for handling both hardware and software exceptions. Structured exception handling enables the programmer to have complete control over the handling of exceptions and provides support for debuggers. |
WAF | Web Application Firewall | "A WAF is an application firewall for HTTP applications. It applies a set of rules to an HTTP conversation. Generally, these rules cover common attacks such as cross-site scripting (XSS) and SQL injection. While proxies generally protect clients, WAFs protect servers." |
REST API | REpresentational State Transfer | "Web services that conform to the REST architectural style, called RESTful Web services (RWS), provide interoperability between computer systems on the Internet. OpenID works with OAuth and supports REST." |
GPT | GUID Partition Table | Replacement for MBR. Necessary for partitions larger than 2 TB. GUID = Globally Unique IDentifier. |
GUID | Globally Unique IDentifier | 128-bit distinctive reference number |
DAMP | Database Activity Monitoring and Prevention | Provides privileged user and application access monitoring that is independent of native database logging and audit functions and can block unauthorized activities. |