WSJ - Cybersecurity Vocab

Attack Surface

• A 'WarGames' style monitor at a cybercriminal command center where hackers can watch attacks in real time.

• The moment when a large-scale hack or virus becomes apparent.

• The sum of the different points bad actors can use to enter your systems.

• A decoy hackers use to make targets think they have stopped a continuing attack.

Backdoor

• The USB port on your computer that is vulnerable to malicious software.

• A secret entry point established to circumvent normal security measures for access to software or a computer system.

• A food-delivery service favored by hackers.

• A place on the back of prototype computers that can be used for biometric breath exhalation logins, or BELs.

Bug Bounty

• A type of software that can soak up a lot of bugs, quickly.

• A system that is overrun by malicious software.

• Reward proffered by some organizations and developers to individuals who report a vulnerability or bug.

• The amount of money hackers can make from placing a bug in a computer.

Catfishing

• When hackers bottom-feed, targeting the smallest, most-vulnerable companies.

• When cybercriminals remotely reverse the polarity on a target company’s server.

• When companies turn the tables on hackers, catching them in the act.

• When a bad actor creates an online fictional persona for deceptive purposes.

Clickjacking

• An attack that fools victims into clicking on a link that seems to take them to one place but instead routes them to an attacker's site.

• When people repeatedly click on a link, inadvertently creating an opening for hackers.

• A type of login that requires a special hand-held clicker.

Keylogger

• A unique alphanumeric code that verifies authorized software access.

• Software that records users’ keystrokes to collect passwords and other high-value information.

• Slang for beer that coders drink at all-night coding sessions.

• The grunt at software companies who has to do the most boring coding.

Multifactor Authentication (MFA) or Two-Factor Authentication (2FA)

• A method of password storage where users are required to keep sensitive information in two or more hard-to-remember places.

• A password-management system that more than two people have to agree on in order for it to be valid.

• A security approach that asks users to give at least two credentials, such as a password and biometric, to access an organization’s data or systems.

• All of the above

Penetration Testing

• Also known as pen-testing, it's an attempt to evaluate how hack-proof a system is by trying to exploit it.

• What hackers who want legitimate jobs have to go through before being hired by software companies.

• A hacker game to see how many random businesses they can infiltrate in a set amount of time, usually 12 hours.

• A videogame version of Dante's 'Inferno' where players have to hack their way through the concentric circles of hell.

Phishing

• An email from your company that provides login information.

• The music hackers play when launching an attack on a big target.

• A slang term for annoying marketing calls, based on a mashup of 'phone' plus 'fishing.'

• When attackers send emails that purport to be from reputable parties to induce recipients to reveal personal information.

Ransomware

• The practice of personalizing your home-screen image.

• A cyberattack aimed at stealing user data where the attacker pretends to be a trusted individual or organization to trick the victim. Common techniques include phishing and smishing.

• The art of teaching employees how to avoid becoming victims of cyberattacks.

• The term used by psychologists to help introverted techies get more engaged in real-life relationships.