Security Strategies in Windows Chapters 1-2 Key Terms

Administrative Control (Chapter 1)

•  Any person or program that attempts to interact with a computer information system in an unauthorized manner.

•  A management action, written policy, procedure, guideline, regulation, law, or rule of any kind.

•  Any user (person or program) that possesses permission to access a resource.

• The assurance that requested information is available to authorized users upon request.

Attacker (Chapter 1)

•  Confidentiality, integrity, and availability, which are the goals of information security

• Any user (person or program) that possesses permission to access a resource.

• The assurance that requested information is available to authorized users upon request.

• Any person or program that attempts to interact with a computer information system in an unauthorized manner.

Authorized User (Chapter 1)

• Any user (person or program) that possesses permission to access a resource.

• The assurance that requested information is available to authorized users upon request.

• Confidentiality, integrity, and availability, which are the goals of information security

• A collection of computer and network devices connected to one or more networks, generally for the purpose of fulfilling business functions. Also called IT Infrastructure.

Availability (Chapter 1)

•  A management action, written policy, procedure, guideline, regulation, law, or rule of any kind.

• Any person or program that attempts to interact with a computer information system in an unauthorized manner.

• The assurance that requested information is available to authorized users upon request.

•  Any user (person or program) that possesses permission to access a resource.

C-I-A Triad (Chapter 1)

• The assurance that requested information is available to authorized users upon request.

• The assurance that information can be accessed and viewed only by authorized users.

• Confidentiality, integrity, and availability, which are the goals of information security

• A control that repairs the effects of damage from an attack. Corrective controls include virus removal procedures, firewall table updates, and user authorization database updates.

Computer Environment (Chapter 1)

• The assurance that information can be accessed and viewed only by authorized users.

• A management action, written policy, procedure, guideline, regulation, law, or rule of any kind.

• A collection of computer and network devices connected to one or more networks, generally for the purpose of fulfilling business functions. Also called IT Infrastructure.

• Any person or program that attempts to interact with a computer information system in an unauthorized manner.

Confidentiality (Chapter 1)

• Confidentiality, integrity, and availability, which are the goals of information security

• The assurance that information can be accessed and viewed only by authorized users.

• Any user (person or program) that possesses permission to access a resource.

• A management action, written policy, procedure, guideline, regulation, law, or rule of any kind.

Corrective Control (Chapter 1)

• A control that repairs the effects of damage from an attack. Corrective controls include virus removal procedures, firewall table updates, and user authorization database updates.

• The assurance that requested information is available to authorized users upon request.

• The assurance that information can be accessed and viewed only by authorized users.

•  Any person or program that attempts to interact with a computer information system in an unauthorized manner.

Defense in Depth (Chapter 1)

• The assurance that information can be accessed and viewed only by authorized users.

• A control that detects when an action has occurred. Detective controls include smoke detectors, log monitors, and system audits.

• A security strategy that relies on multiple layers of security that require attackers to defeat multiple controls to access any protected resource.

• The assurance that requested information is available to authorized users upon request.

Detective Control (Chapter 1)

• Any person or program that attempts to interact with a computer information system in an unauthorized manner.

• A control that detects when an action has occurred. Detective controls include smoke detectors, log monitors, and system audits.

• A control that repairs the effects of damage from an attack. Corrective controls include virus removal procedures, firewall table updates, and user authorization database updates.

• An agreement between the software producer and the end user. The EULA addresses issues regarding approved use and liability. Also called a Software License Agreement.