Exam 15: Computer Security Techniques

_________ is not a central element of a typical antivirus scheme.

__________ integrates with the operating system of a host computer and monitors program behavior in real time for malicious actions.

One of the best known protection mechanisms is __________ , which is a compiler extension that inserts additional function entry and exit code.

The _________ prevents duplicate passwords from being visible in the password file.

A password cracker is a password guessing program.

A hashed password technique typically combines the password with ___________ .

__________ controls access based on comparing security labels with security clearances.

Objects that a user possesses for the purpose of user authentication are called _________ .

Authentication protocols used with smart tokens are classified into three categories: static, dynamic password generator, and __________ .

An __________ dictates what types of access are permitted, under what circumstances, and by whom.

The motivation for the development of the __________ has been the rising threat of Internet-based virus propagation.

__________ controls access based on the roles that users have within the system and on rules stating what accesses are allowed to users in given roles.

In the case of a challenge-response protocol the token generates a unique password periodically.

_________ is a procedure that allows communicating parties to verify that the contents of a received message have not been altered and that the source is authentic.

For user authentication to computer, the most important category of smart token is the smart card.

__________ add a specialized layer of security software to vulnerable or sensitive systems; examples include database servers and administrative systems.

__________ technology enables the antivirus program to easily detect even the most complex polymorphic viruses while maintaining fast scanning speeds.

A __________ authentication system attempts to authenticate an individual based on his or her unique physical characteristics.

__________ is based on the roles that users assume in a system rather than the user's identity.

_________ controls access based on the identity of the requestor and on access rules (authorizations) stating what requestors are (or are not) allowed to do.