Exam 14: Computer Security Threats

A computer _________ is a piece of software that can "infect" other programs by modifying them; the modification includes injecting the original program with a routine to make copies of itself, which can then go on to infect other programs.

_________ assures that a system performs its intended function in an unimpaired manner, free from deliberate or inadvertent unauthorized manipulation of the system.

A _________ is a program that can replicate itself and send copies from computer to computer across network connections.

Hardware is the most vulnerable to attack and the least susceptible to automated controls.

A __________ is a secret entry point into a program that allows someone who is aware of it to gain access without going through the usual security access procedures.

Nimda has worm, virus, and mobile code characteristics.

Three key objectives of computer security are: confidentiality, availability, and _________ .

__________ assures that information and programs are changed only in a specified and authorized manner.

A loss of _________ is the disruption of access to, or use of, information or an information system.

_________ can occur either by means of malicious logic or a hacker that has gained unauthorized access to a system.

Deception is a threat to availability or system integrity.

_________ is the protection afforded to an automated information system in order to attain the applicable objectives of preserving the integrity, availability, and confidentiality of information system resources.

A __________ is code embedded in some legitimate program that is set to "explode" when certain conditions are met.

Traditionally, those who hack into computers do so for the thrill of it or for status.

A _________ captures keystrokes on the infected machine.

One way to obstruct system operation is to overload the system by placing excess burden on communication traffic or processing resources.

Insider attacks are among the easiest to detect and prevent.

_________ assures that private or confidential information is not made available or disclosed to unauthorized individuals.

Defacing a Web server, running a packet sniffer on a workstation to capture user names and passwords, viewing sensitive data without authorization, and copying a database containing credit card numbers, are all examples of _________ .

An example of _________ is known as traffic analysis, in which an adversary is able to gain information from observing the pattern of traffic on a network.