Used within Microsoft Windows to manage users and computers. It is implemented on a domain controller within a domain. Administrators use it to create password policies, lock down the GUI, configure host-based firewalls, and much more. Remote wipe, or remote sanitize, erases all data on lost devices. Full disk encryption protects the data on the device if it is lost.

Protocol used to synchronize computer times.

An extension of a host-based IDS. Designed to react in real time to catch an attack in action.

Provides cloud customers with an easy-to-configure operating system and on-demand computing capabilities.

A hash function used for integrity. It creates fixed length hashes of 128, 160, 256, or 320 bits.

A hashing function used to provide integrity. Uses 128 bits. A hash is simply a number created by applying the algorithm to a file or message at different times. The hashes are compared to each other to verify that integrity has been maintained.

Newer security protocol used to protect wireless transmissions. It supports CCMP for encryption, which is based on AES and stronger than TKIP which was originally released with WPA. In Enterprise Mode, it can use RADIUS to support 802.1x authentication. In personal mode, it uses a preshared key (PSK).

Access control model that uses sensitivity labels assigned to objects and subjects. SELinux is a trusted operating system platform using the MAC model. Other access control models are DAC and RBAC.

Tunneling protocol used with VPNs. Uses TCP port 1723.

It scripting allows an attacker to redirect users to malicious websites and steal cookies. E-mail can include an embedded HTML image object or a JavaScript image tag as part of a malicious cross-site scripting attack. Websites prevent cross-site scripting attacks with input validation to detect and block input that include HTML and JavaScript tags.

Real-time direct text-based communication between two or more people, often referred to as chat.

A computer's firmware used to manipulate different settings such as the date and time, boot drive, and access password.

Used to transfer e-mail from mail servers to clients. Uses port 110.

Used to resolve host names to IP addresses. Uses port 53. Poisoning attempts to modify or corrupt cached results. A pharming attack is a specific type of attack that redirects a website's traffic to another website.

Resolves IP addresses to MAC addresses. Poisoning attacks can redirect traffic through an attacker's system by sending false MAC address updates.