Security+ Study Guide

The process of agreeing to communicate and share data. TCP uses a three-way handshake to establish connections, and part of this process can be exploited by SYN attacks.

The process of making an entity, usually an operating system, more secure by closing known holes and addressing known security issues.

A single number used to represent the original piece of data.

The process of transforming characters into other characters that represent (but are not) the originals. Traditionally, the results are smaller than the original, and they are more secure.

A method of Intruder Detection that is host-based. The alternative is network-based.

A clustering solution to provide resource reliability and availability.

See man in the middle attack.

The Health Insurance Portability and Accountability Act addresses security and privacy of health-related data.

Addressed in RFC 2104, this is "a mechanism for message authentication using cryptographic hash functions" per the draft of the Federal Information Processing Standard (FIPS) publication.

Typically an e-mail message warning of something that is not true, such as the outbreak of a new virus. The hoax can send users into a panic and cause more harm than the virus could.

A bogus system set up to attract and slow down a hacker.

See H-IDS.

Any network device with a TCP/IP network address.

Any code that behaves in a way other than in the best interest of the user and the security of data.

Communication that occurs between hosts.

Another word for a patch. When Microsoft rolls a bunch of them together, they become known as a Service Pack.

A location that can provide operations within hours of a failure.

See Hypertext Markup Language.

See Hypertext Transfer Protocol.

Hypertext Transfer Protocol over Secure Sockets layer is a combination of HTTP with SSL to make for a secure connection. It uses Port 443 by default.

A set of codes used to format text and graphics that will be displayed in a browser. The codes define how data will be displayed.

The protocol used for communication between a web server and a web browser.