Security Chapter 1 Vocab Review

A new class of attack that uses innovative attack tools to infect a system and then silently extracts data over an extended period.

• defense-in-depth

• administrative controls

• Advanced Persistent Threat (APT)

• new threat

An item that has value.

• attributes

• asset

• accept

• control diversity

Having different groups responsible for regulating access to a system.

• control diversity

• intent and motivation

• layered security

• insiders

The out-of-the-box security configuration settings

• misconfiguration

• improperly configured account

• weak configuration

• default configurations

A group of threat actors that is strongly motivated by ideology.

• competitors

• hactivists

• insiders

• threat actor

Addressing risks by making risks less serious.

• intent and motivation

• integrity

• mitigate

• non-regulatory

State-sponsored attackers employed by a government for launching computer attacks against foes.

• nation state actors

• threat actor

• insiders

• competitors

A person or element that has the power to carry out a threat.

• threat

• nation state actors

• hactivists

• threat actor

Individual who lacks advanced knowledge of computers and networks and so uses downloaded automated attack software to attack information systems.

• directory

• script kiddies

• script

• program

Freely available automated attack software.

• resource exhaustion

• closed-source intelligence

• open-source intelligence

• shareware