Cyber Security TM256 - Systems Security Block 2

Verifying the identity of a user, process, or device accessing a system resource.

Rules for creating and using passwords to improve security.

Authentication requiring multiple verification steps (e.g., password, token).

Determining what an authenticated entity is permitted to access or do.

Authorization based on the security level of the user and the object.

Authorization based on the owner's decision to share.

Authorization based on job roles, granting access based on roles.

Ensuring that actions performed by users or systems are traceable.

The minimum number of characters a password must contain.

Requirements for a password to include different types of characters (alphabetic, numeric, symbols).

The period of time a password is valid before it needs to be changed.

Software used to securely store and manage multiple passwords.

A security method requiring two or more authentication factors.

An attack that tries many password combinations until successful.

An attack that overwhelms a system, preventing legitimate users from accessing it.

Discretionary Access Control allows users to set fine-grained access rules to objects.

Role-Based Access Control manages access through roles, connecting users to specific actions on objects.

A hierarchical structure of roles where child roles inherit parent roles' permissions and have additional actions.

A security component that validates access requests, ensuring access control policies are followed.

A set of criteria which enables or prevents a subject (user) from acting upon an object.

In RBAC, the issue of a large number of roles making management complex.

A combination of an object and an action that represents authorized user activity on system resources.

An operating system manages a device's memory, processes, and provides a platform for applications to run.

An insecure OS can compromise the entire device, applications, and data, potentially giving attackers access to other networked resources.

The kernel provides core services, manages hardware resources, and enforces security measures like access control.

A secure area in a basic OS where all components and users are authenticated and authorized to access the entire system.

A basic OS design where all system components are accessible to all users and applications. Less secure.

The central core of a monolithic OS that runs with higher privileges than user applications, providing separation and security.

It provides more isolation and security by preventing user applications from directly accessing critical system components.

OSs evolved from single-domain designs with less security to more separated designs with a kernel to improve security.

An operating system where all functions are combined within a single security boundary, accessible only by the administrator. Applications are isolated outside this boundary and have controlled access to resources.

An OS where each component (like the scheduler, memory manager, etc.) has its own security boundary, requiring inter-process communication (IPC) to interact.

The core management component in a hypervisor-based OS, responsible for resource management (memory, networking, disk) and providing an interface between the hardware and software components.

A user account or group representing a project, allocated with resources to create virtual environments within a hypervisor-based OS.

A software environment emulated by a hypervisor, allowing users to run different operating systems or applications on the same physical hardware.

The mechanism by which different processes or components within an OS (especially in multi-server OS) communicate and exchange information.

Resources like memory, storage, and networking, emulated and managed by a hypervisor, accessible to tenants and their virtual machines within a hypervisor-based system.

The process of securing a system's configuration and settings to reduce vulnerabilities.

Securing a Linux server by updating software, implementing password policies, removing unnecessary services, and blocking ports.

Securing a Windows server by implementing password policies, using security scanning tools like Windows Defender, and removing unnecessary software.

A Linux command used to update software on a Red Hat system.

Firmware responsible for managing the start-up process of hardware components and loading the operating system.

Securing low-level areas like the boot process, memory, and CPU to prevent attacks.

Protecting information from unauthorized disclosure, ensuring only authorized individuals can access it.

Ensuring information is accurate and complete, preventing unauthorized modifications.