Computer Security Chapter 1: Introduction

A set of interconnected parts that work together to achieve a specific goal. Systems can be abstract, like a set of ideas, or physical, like a computer.

Measures taken to safeguard information systems and their assets, ensuring confidentiality, integrity, and availability.

The assurance that only authorized individuals can access sensitive information.

Ensuring that data remains accurate and unaltered, preventing unauthorized modifications.

Guaranteeing that systems and data are accessible to authorized users when needed.

Confidentiality, integrity, and availability are essential for information security. But they can sometimes conflict with each other, needing careful balancing.

Measures taken to guarantee the confidentiality, integrity, and availability of information system assets.

Focuses on the correct operation and availability of a computer system, without specific concern for data.

Ensuring the confidentiality, integrity, and availability of data in all forms, including electronic, print, and physical.

The assurance of information and management of risks associated with information use, processing, storage, and transmission.

A broad term encompassing cybersecurity, network security, and information security, focusing on protecting computer systems and networks.

Protecting data and systems from unauthorized access, use, disclosure, disruption, modification, or destruction.

Measures taken to prevent unauthorized access, use, disclosure, disruption, modification, or destruction of network data.

Measures taken to prevent unauthorized access, use, disclosure, disruption, modification, or destruction of software applications.

The likelihood that individuals will act in a predictable and expected manner, often based on a prior relationship or understanding.

Anything that could potentially damage your computer system or sensitive data without your knowledge or consent.

An attack that exploits a weakness or vulnerability in a system to gain unauthorized access or cause harm.

A flaw or weakness in a system that could be exploited by a security threat.

The level of confidence we have that a computer system or its components will operate as intended.

The potential negative consequences or damage that could result from a security risk being realized.

The likelihood that a specific security risk will actually occur.

The anticipation or expectation of loss or damage that may result from a security risk.

Trust is the belief that someone or something will act in a predictable and reliable manner. In computing, it refers to the level of confidence we have that systems or components will behave as expected.

Risk in computing refers to any event or circumstance that could potentially jeopardize the security or integrity of your computer systems and data.

Internal servers, domain controllers, and storage devices are considered the most trusted components within a network because they are typically under strict control and security measures.

Internal users and remote, authenticated users are considered less trusted than internal servers because there is a higher possibility for human error or misuse of privileges.

Internet servers and remote, unauthenticated users are considered the least trusted because they pose the highest security risk due to the lack of control and verification.

Secure Sockets Layer (SSL) and Transport Layer Security (TLS) are protocols that use certificates to establish encrypted connections between a client and a server, ensuring secure communication.

A type of malicious software that spreads by copying itself to other programs or files, often via email or network shares.

A type of malware that replicates itself and spreads to other computers without human interaction.

A type of malware disguised as a benign program to gain access to a user's computer and steal data.

A type of malware that secretly collects information about a user's activities and sends it to a third-party without their knowledge.

A person who is skilled in computer systems and uses their knowledge to gain unauthorized access to information.

A person who uses their computer skills for malicious purposes, like stealing data or disrupting systems.

A person with limited skills who uses pre-made tools to exploit vulnerabilities in systems.

Any weakness or flaw in a system that could be exploited by attackers to gain unauthorized access or disrupt operations.

An action, device, procedure, or technique that helps reduce the risk of a threat exploiting a vulnerability.

The probability of a particular threat exploiting a vulnerability, leading to a specific harmful outcome.

A set of rules and practices that describe how a system or organization protects sensitive data and resources.

Any computing infrastructure or assets that require protection.

A potential threat to the security of a system.