Unit 11 Topic 7 Antivirus and Firewalls

A utility program that is used to prevent malicious software from infecting your computer.

• Anti-virus

• Firewall

• Windows 10

• MS Access

Anti-virus technique that monitors the behaviour of programs and detects anything that appears suspicious, such as trying to copy itself into another program.

• Heuristic detection

• Stateful inspection

• Packet filtering

• Signature detection

Used to check behaviour of potentially harmful software in an isolated environment.

• Sandbox

• Shellpool

• Waterbutt

• Firewall

The three options most commonly used to deal with an identified threat.

• Clean

• Quarantine

• Delete

• Attach to email

• Save onto an external device

This moves the malware to a secure location on the computer and prevents it from executing or spreading

• Quarantine

• Deletion

• Virus Signature

• Private Key encryption

A hardware device or a utility program that monitors incoming and outgoing network traffic and blocks any traffic that it deems suspicious.

• Firewall

• Sandbox

• Anti-virus software

• Proxy server

Packets of data are inspected by the firewall to check which port they are attempting to access.

• Packet filtering

• Stateful inspection

• Signature detection

• Public key encryption

A form of firewall that controls the input and output of packets to an application

• Application firewall

• Utility firewall

• Application analysis system (AAS)

• Anti-virus software

Define what data should be accepted, rejected or dropped from entering the network or computer

• Inbound rules

• Outbound rules

• Incoming rules

• Outgoing rules

Used to assign private IP addresses to our devices within our private network.

• Network Address Translation

• Private key encryption

• Dynamic Host Configuration Protocol

• WPA2