The input can be of arbitrary size.

The output is always a fixed size.

The hash function is one-way and has no inverse.

Two different input data almost never give the same output.

Confidentiality

Integrity

Availability

Processing

Data in transit

Data at rest or in storage

Data in processing

Data in use

The development and use of codes.

The study and breaking of codes.

The science of making and breaking secret codes.

A method of storing and transmitting data.

Virus

Spam

Spyware

Adware

Ransomware

To exploit vulnerabilities in networks.

Continuous actions to protect network systems and all data from unauthorized use or destruction.

To steal money and information.

To track users online.

The conversion of ciphertext into plaintext.

The process of scrambling data to make it more difficult for unauthorized access.

The conversion of plaintext into ciphertext.

A method of controlling access to a building.

EMBG

Medical data

Credit card number

Financial records

Identification

Authentication

Authorization

Tracking

It is a two-way function.

It has an inverse.

It is a one-way function.

It produces variable-size output.

To allow cyberattackers to operate freely.

To ensure that defense professionals work within legal provisions and boundaries.

To enable the misuse of confidential data.

To make all unethical actions punishable by law.

Data confidentiality

Data availability

Data and information are complete and unaltered at the time we retrieve them.

Data encryption

Brute force

Dictionary attack

Social engineering

Phishing

It makes the data readable.

It plays a major role in encryption and decryption.

It converts ciphertext to plaintext.

It is only used for encryption.

Symmetric algorithms use two different keys, while asymmetric use the same key.

Symmetric algorithms use the same pre-shared key for encryption and decryption, while asymmetric algorithms use one key for encryption and another for decryption.

Asymmetric algorithms are simpler and require less processing power.

Symmetric algorithms are more complex and require more processing power.

Block Ciphers

Stream Ciphers

Hash Ciphers

Symmetric Ciphers

The message has no title.

The message requests user account information be updated.

The message text has misspelled words or strange punctuation.

The links in the message are long and/or strange.

The message asks the user to open an attached file.

An attack that only uses software vulnerabilities.

A combined attack.

An attack that only targets hardware.

An attack that only uses social engineering.

The art of making confusing, ambiguous, difficult-to-understand messages.

Deliberately scrambling messages to prevent unauthorized access.

Directly making messages readable.

Only used for data masking.

To define new types of cyberattacks.

To categorize malware.

To be used as a tool for managing the protection of networks, domains, and the Internet.

To identify cybercriminals.

Data alteration.

Disclosure of sensitive information to unauthorized people, resources, or processes.

System downtime.

Unauthorized access to physical equipment.

Personal data

Business data

Classified data

Public data

Encryption

Authentication

Identity verification

Physical security

Actions that bring the most good over bad are the best ethical choices.

Everyone should make their own decisions, not at the expense of others.

The actions of people in charge of cybersecurity should take into account the whole picture of social good.

Prioritizing personal gain over societal benefit.

The development of codes.

The use of codes.

The study and breaking of codes.

The creation of new encryption algorithms.

Encrypted data.

Readable data.

Data that has been scrambled.

Ciphertext.

It protects against accidental changes.

If a malicious user intercepts, changes, and calculates a new hash, the recipient receives a message with a valid hash.

It is not subject to man-in-the-middle attacks.

It makes it easier to find the original password.

To create new malware.

To exploit known vulnerabilities.

Google formed a permanent team to find software vulnerabilities.

To monitor network communication.

Using strong encryption techniques for secure online transactions.

Using resources to mine cryptocurrencies without approval or user knowledge.

A new type of digital money.

Solving mathematical problems for transaction authentication.

Confidentiality, Integrity, Availability.

Transmission, Storage, Processing.

Technologies, Policies and Practices, People.

Identification, Authentication, Authorization.

Data masking

Steganographic techniques

Software watermarking

Software obfuscation

Actions to exploit network systems.

Continuous actions to protect network systems and all data from unauthorized use or destruction.

Monitoring online identities.

Tracking cookies.

A program written to exploit a known defect.

Any type of software or hardware defect.

The act of using an exploit to attack a defect.

A malicious executable code.

To exploit vulnerabilities for personal gain.

To identify vulnerabilities to improve security.

To steal credit card information.

To install malware on systems.

It attaches to other executable files and requires user action.

It carries out malicious operations that resemble desired ones.

It replicates itself through independent exploiting vulnerabilities in networks and does not need a host.

It remains inactive until an activation trigger.

Real approach

Approach for the common good

Utilitarian ethics

Deontology

A program that tracks and spies on a user.

A malicious program that uses an activation-trigger to wake up malicious code.

A program that displays unwanted ads.

A program that blocks access to data until ransom is paid.

A unique identifier for a user.

A hash value that changes with the smallest change in the message.

A method for authentication only.

A way to encrypt data.

Readable data.

Encrypted data.

Plaintext.

A cryptographic key.

Thou Shalt Not Use A Computer To Harm Other People.

Thou Shalt Always Share Your Passwords With Others.

Thou Shalt Not Snoop Around In Other People's Computer Files.

Thou Shalt Not Copy Or Use Proprietary Software For Which You Have Not Paid.

The process of hiding information.

Discovering hidden information.

The art of making confusing messages.

A type of encryption.

Actions that bring the most good over bad.

Everyone to make their own decisions, not at the expense of others, primarily referring to rights to truth, privacy, and security.

What is good for society as a whole.

Misuse of

Uses files of most common words.

Tries all possible combinations of characters for a given length.

Requires little processing time.

Compares calculated hashes to password hashes.

A virus that attaches to executable files.

A Trojan horse that uses user privileges.

Malware that takes control of a device without the user's knowledge.

A worm that replicates itself.

Any type of software or hardware defect.

A program written to exploit a known vulnerability.

The act of using an exploit to attack the vulnerability.

The process of finding vulnerabilities.

Unreadable results from reverse engineering.

Unauthorized access or modification.

Difficult analysis.

Normal program functionality.

Private and Public.

Symmetric and Asymmetric.

Block and Stream.

Plaintext and Ciphertext.

An attack that tries all possible combinations of characters.

An attack that uses files of the most common words, phrases, or passwords.

An attack that focuses on hardware vulnerabilities.

An attack that exploits buffer overflows.

Protecting software from unauthorized access.

Embedding a secret message into the program.

Translates software into an equivalent version that is very difficult to analyze, but still works.

Protecting software from modification.

Online identity is about personal information, offline is about public information.

Online identity is how you present yourself on the Internet, while offline identity is personal information and who knows it.

There is no distinction between the two.

Online identity is always fully visible.

Confidentiality, Integrity, Availability.

Transmission, Storage, Processing.

Technology, Policies and Practice, People.

Identification, Authentication, Authorization.

It makes the algorithm more complicated.

It is the easiest part of the design.

Many systems have failed due to key management problems.

It ensures that the algorithm is secret.

Buffer overflow

Invalid input

Competition conditions (Race Conditions)

Weaknesses in security practices

To make you an easy target for attacks.

To indicate that you are easy a target for unwanted attention.

To avoid indicating that you are an easy target for attacks or unwanted attention.

To reveal more personal information.

Disabling security policies.

Tracking and logging events.

Undocking devices.

Restricting floppy access.

The ability to ignore legal provisions.

At least the same skills as those attacking, while working within legal and ethical frameworks.

The ability to break into any computer system.

No limits on their actions.

Encryption only.

Obfuscation of data and steganography.

Storing data in plaintext.

Only applying access controls.

It defines only technical guidance.

It defines objectives for data in each of the three states (transmission, storage, processing) and ties them to policies, procedures, and guidelines.

It is implemented only by IT professionals.

It is independent of management definitions.

The science of making and breaking secret codes.

The development and use of codes.

The study and breaking of codes.

A way of controlling access.

Data is always available.

Data has not been changed by anyone during its entire lifecycle.

Data is confidential.

Data is encrypted.

The input can be of arbitrary size.

The output is always a fixed size.

The hash function is one-way and has no inverse.

Two different input data almost never give the same output.

Confidentiality

Integrity

Availability

Processing

Data in transit

Data at rest or in storage

Data in processing

Data in use

The development and use of codes.

The study and breaking of codes.

The science of making and breaking secret codes.

A method of storing and transmitting data.

Spam

Spyware

Adware

Ransomware

Virus

To exploit vulnerabilities in networks.

Continuous actions to protect network systems and all data from unauthorized use or destruction.

To steal money and information.

To track users online.

The conversion of ciphertext into plaintext.

The process of scrambling data to make it more difficult for unauthorized access.

The conversion of plaintext into ciphertext.

A method of controlling access to a building.

EMBG

Medical data

Credit card number

Financial records

Identification

Authentication

Authorization

Tracking

It is a two-way function.

It has an inverse.

It is a one-way function.

It produces variable-size output.

To allow cyberattackers to operate freely.

To ensure that defense professionals work within legal provisions and boundaries.

To enable the misuse of confidential data.

To make all unethical actions punishable by law.

Data confidentiality

Data availability

Data and information are complete and unaltered at the time we retrieve them.

Data encryption

Brute force

Dictionary attack

Social engineering

Phishing

It makes the data readable.

It plays a major role in encryption and decryption.

It converts ciphertext to plaintext.

It is only used for encryption.

Symmetric algorithms use two different keys, while asymmetric use the same key.

Symmetric algorithms use the same pre-shared key for encryption and decryption, while asymmetric algorithms use one key for encryption and another for decryption.

Asymmetric algorithms are simpler and require less processing power.

Symmetric algorithms are more complex and require more processing power.

Block Ciphers

Stream Ciphers

Hash Ciphers

Symmetric Ciphers

The message has no title.

The message requests user account information be updated.

The message text has misspelled words or strange punctuation.

The links in the message are long and/or strange.

The message asks the user to open an attached file.

An attack that only uses software vulnerabilities.

A combined attack.

An attack that only targets hardware.

An attack that only uses social engineering.

The art of making confusing, ambiguous, difficult-to-understand messages.

Deliberately scrambling messages to prevent unauthorized access.

Directly making messages readable.

Only used for data masking.

To define new types of cyberattacks.

To categorize malware.

To be used as a tool for managing the protection of networks, domains, and the Internet.

To identify cybercriminals.

Data alteration.

Disclosure of sensitive information to unauthorized people, resources, or processes.

System downtime.

Unauthorized access to physical equipment.

Personal data

Business data

Classified data

Public data

Encryption

Authentication

Identity verification

Physical security

Encryption

Authentication

Identity verification

Physical security

Actions that bring the most good over bad are the best ethical choices.

Everyone should make their own decisions, not at the expense of others.

The actions of people in charge of cybersecurity should take into account the whole picture of social good.

Prioritizing personal gain over societal benefit.

The development of codes.

The use of codes.

The study and breaking of codes.

The creation of new encryption algorithms.

Encrypted data.

Readable data.

Data that has been scrambled.

Ciphertext.

It protects against accidental changes.

If a malicious user intercepts, changes, and calculates a new hash, the recipient receives a message with a valid hash.

It is not subject to man-in-the-middle attacks.

It makes it easier to find the original password.

To create new malware.

To exploit known vulnerabilities.

Google formed a permanent team to find software vulnerabilities.

To monitor network communication.

Using strong encryption techniques for secure online transactions.

Using resources to mine cryptocurrencies without approval or user knowledge.

A new type of digital money.

Solving mathematical problems for transaction authentication.

Confidentiality, Integrity, Availability.

Transmission, Storage, Processing.

Technologies, Policies and Practices, People.

Identification, Authentication, Authorization.

Data masking

Steganographic techniques

Software watermarking

Software obfuscation

Actions to exploit network systems.

Continuous actions to protect network systems and all data from unauthorized use or destruction.

Monitoring online identities.

Tracking cookies.

A program written to exploit a known defect.

Any type of software or hardware defect.

The act of using an exploit to attack a defect.

A malicious executable code.

To exploit vulnerabilities for personal gain.

To identify vulnerabilities to improve security.

To steal credit card information.

To install malware on systems.

It attaches to other executable files and requires user action.

It carries out malicious operations that resemble desired ones.

It replicates itself through independent exploiting vulnerabilities in networks and does not need a host.

It remains inactive until an activation trigger.

Real approach

Approach for the common good

Utilitarian ethics

Deontology

A program that tracks and spies on a user.

A malicious program that uses an activation-trigger to wake up malicious code.

A program that displays unwanted ads.

A program that blocks access to data until ransom is paid.

A unique identifier for a user.

A hash value that changes with the smallest change in the message.

A method for authentication only.

A way to encrypt data.

Readable data.

Encrypted data.

Plaintext.

A cryptographic key.

Thou Shalt Not Use A Computer To Harm Other People.

Thou Shalt Always Share Your Passwords With Others.

Thou Shalt Not Snoop Around In Other People's Computer Files.

Thou Shalt Not Copy Or Use Proprietary Software For Which You Have Not Paid.

The process of hiding information.

Discovering hidden information.

The art of making confusing messages.

A type of encryption.

Actions that bring the most good over bad.

Everyone to make their own decisions, not at the expense of others, primarily referring to rights to truth, privacy, and security.

What is good for society as a whole.

Misuse of confidential data.

Uses files of most common words.

Tries all possible combinations of characters for a given length.

Requires little processing time.

Compares calculated hashes to password hashes.

A virus that attaches to executable files.

A Trojan horse that uses user privileges.

Malware that takes control of a device without the user's knowledge.

A worm that replicates itself.

Any type of software or hardware defect.

A program written to exploit a known vulnerability.

The act of using an exploit to attack the vulnerability.

The process of finding vulnerabilities.

Unreadable results from reverse engineering.

Unauthorized access or modification.

Difficult analysis.

Normal program functionality.

Private and Public.

Symmetric and Asymmetric.

Block and Stream.

Plaintext and Ciphertext.

An attack that tries all possible combinations of characters.

An attack that uses files of the most common words, phrases, or passwords.

An attack that focuses on hardware vulnerabilities.

An attack that exploits buffer overflows.

Protecting software from unauthorized access.

Embedding a secret message into the program.

Translates software into an equivalent version that is very difficult to analyze, but still works.

Protecting software from modification.

Online identity is about personal information, offline is about public information.

Online identity is how you present yourself on the Internet, while offline identity is personal information and who knows it.

There is no distinction between the two.

Online identity is always fully visible.

Confidentiality, Integrity, Availability.

Transmission, Storage, Processing.

Technology, Policies and Practice, People.

Identification, Authentication, Authorization.

It makes the algorithm more complicated.

It is the easiest part of the design.

Many systems have failed due to key management problems.

It ensures that the algorithm is secret.

Buffer overflow

Invalid input

Competition conditions (Race Conditions)

Weaknesses in security practices

To make you an easy target for attacks.

To indicate that you are easy a target for unwanted attention.

To avoid indicating that you are an easy target for attacks or unwanted attention.

To reveal more personal information.

Disabling security policies.

Tracking and logging events.

Undocking devices.

Restricting floppy access.

The ability to ignore legal provisions.

At least the same skills as those attacking, while working within legal and ethical frameworks.

The ability to break into any computer system.

No limits on their actions.

Encryption only.

Obfuscation of data and steganography.

Storing data in plaintext.

Only applying access controls.

It defines only technical guidance.

It defines objectives for data in each of the three states (transmission, storage, processing) and ties them to policies, procedures, and guidelines.

It is implemented only by IT professionals.

It is independent of management definitions.

The science of making and breaking secret codes.

The development and use of codes.

The study and breaking of codes.

A way of controlling access.