Exam 2: Cybersecurity and Cryptography

This is an attack on a computer system that takes advantage of a particular vulnerability that the system offers to intruders.

This is the encryption algorithm that will begin to supplant the Data Encryption Standard (DES) - and later Triple DES - over the next few years as the new standard encryption algorithm.

The developers of an operating system or vendor application might issue this to prevent intruders from taking advantage of a weakness in their programming.

Developed by Philip R. Zimmermann, this is the most widely used privacy-ensuring program by individuals and is also used by many corporations.

What "layer" of an e-mail message should you consider when evaluating e-mail security?

In password protection, this is a random string of data used to modify a password hash.

This is the forging of an e-mail header so that the message appears to have originated from someone or somewhere other than the actual source.

This is a mode of operation for a block cipher, with the characteristic that each possible block of plaintext has a defined corresponding cipher text value and vice versa.

This type of attack may cause additional damage by sending data containing codes designed to trigger specific actions - for example, changing data or disclosing confidential information.

This is a compromised Web site that is being used as an attack launch point in a denialof-service attack.

This is a type of network security attack in which the intruder takes control of a communication between two entities and masquerades as one of them.

This is the modification of personal information on a Web user's computer to gain unauthorized information with which to obtain access to the user's existing accounts.

This was commonly used in cryptography during World War II.

Today, many Internet businesses and users take advantage of cryptography based on this approach.

This is a program in which harmful code is contained inside apparently harmless programming or data.

An intruder might install this on a networked computer to collect user ids and passwords from other machines on the network.

This electronic "credit card" establishes a user's credentials when doing business or other transactions on the Web and is issued by a certification authority.

This is the inclusion of a secret message in otherwise unencrypted text or images.

This type of intrusion relies on the intruder's ability to trick people into breaking normal security procedures.

This is the name for the issuer of a PKI certificate.