Final review ISM3011

What uses a zombie farm, often by an organized crime association, to launch a massive phishing attack?

A pharming attack

Records information about a customer during a web surfing session such as what websites were visited

Chick stream

What is the abused of pay per click, pay-per call, and pay per conversion revenue models by repeatedly clicking on a link to increase charges or cost of the advertiser?

Click fraud

What is a computer crime where a competitor or disgruntled employee increases a company's search advertizing costs by repeatedly on the advertiser's link?

Competitive click-fraud

What is the assurance that messages and information remain available only to those authorized to view them?

Confidentiality

A small file deposited on a hard drive by a website containing information about customers and their web activities

Cookie

What is the legal protection afforded an expression of an idea, such as a song, book, or video game?

Copyright

What software is software that is manufactured to look like the real thing and sold as such?

Counterfeit Software

What is the software that is manufactured to look like the real thing and sold as such?

Counterfeit software

What is the science that studies encryption, which is the hiding of messages so that only the sender and receiver can read them?

Cryptography

What includes threats, negative remarks, or defamatory comments transmitted via the internet or posted on the website?

Cyber-bulling

What is a computer attack where an attacker accesses a wireless computer network, intercepts data, uses network services, and/or sends attack instructions without entering the office or organization that owns the network?

Drive-by hacking

What are the principles and standard that guide our behavior toward other people?

Ethics

A hardware device that captures keystrokes on their journey from the keyboard to the motherboard

Hardware key logger

What policy details the extent to which email messages may be read by others?

email privacy policy

What govern the ethical and moral issues arising from the development and use of information technologies, as well as the creation, collection, duplication, distribution, and processing of information itself

Information ethics

What governs the ethical and moral issues arising from the development and use of information technologies, as well as the creation, collection, duplication, and processing of information itself?

Information ethics

Typically found in an acceptable use policy

Not attempting to break the security of any computer network or user, not performance any non repudiation, not using the service as part of violating any law

What is the right to be left alone when you want to be, to have control over your personal possessions, and not to be observed without your consent?

Privacy

Cyberterrorist

Seeks to cause harm to people or to destroy critical systems or information and use the internet as a weapon of mass destruction.

What phishing expedition in which the emails are carefully designed to target a particular person or organization?

Spear phishing

Software that comes hidden in free downloadable software and tracks online movements

Spyware

What is a special class of adware that collects data about the user and transmits it over the internet without the user's knowledge or permission?

Spyware

Internet use policy

States the ramifications if the policy is violated, describes user responsibility for citing sources, describes the internet services available to users

Script kiddies

find hacking code on the internet and click and point their way into systems to cause damage or spread viruses

Cracker

have criminal intent when hacking

Hactivist

have philosophical and political reasons for breaking into systems and will often deface the website as a protest

What is a technique to gain personal information for the purpose of identity theft, usually by means of fraudulent emails that look as though they came from legitimate business

phishing

What is an act or object that poses a danger to assets?

threat

White hat hackers

work at the request of the system owners to find system vulnerabilities and plug the holes,

What is a program that secretly takes over another computer for the purpose of launching attacks on other computers

zombie

What is the process of providing a user with permission including access levels and abilities such as file access, hours o f access, and amount of allocated storage space?

Authorization

What is a trusted third party, such as VeriSign, that validates user identities by means of digital certificates?

Certificate authority

Which policy contains general principles to guide the proper use of the internet?

Internet use policy

What policy outlining the corporate guidelines or principles governing employee online communications?

A social media policy

What requires a user to agree to follow it to be provided access to corporate email, information systems, and the internet?

A(n) acceptable use policy

Software that generates ads that install themselves on a computer when a person downloads some other program from the internet

Adware

Two items typically contained in an employee monitoring policy

Always enforce the policy the same for everyone, State the consequences of violating the policy

In an employee monitoring policy

Always enforce the policy the same for everyone, state the consequences of violating the policy

What scans and searches hard drives to prevent, detect, and remove known viruses, adware, and spyware?

Anti-virus software

A method for confirming users' identities

Authentication

what is the electronic defacing of an existing website?

Cybervandalism

What rights management is a technological solution that allows publishers to control their digital media to discourage, limit, or prevent illegal copying and distribution?

Digital rights management

Looking through people's trash, is another way hackers obtain information?

Dumpster diving

Select the two terms that refer to the ability of a company to identify search, gather, seize or export digital information in responding to a litigation, audit, investigation, or information inquiry.

Electronic discovery and E discovery

What monitoring policy stating explicitly how, when and where the company monitors its employees?

Employee monitoring policy

Three typical social media policy

Employee twitter, corporate twitter, and personal twitter policies, employee social network and personal social network policies. Employee blog and personal blog policies

What scrambles information into an alternative form that requires a key or password to decrypt?

Encryption

What are policies and procedures that address information management along with the ethical use of computers and the internet in the business environment?

Epolicies

Three reasons why organizations should develop written epolicies

Establish employee procedures, Establish employee guidelines, establish organizational rules

What policy contains general principles to guide computer user behavior?

Ethical computer use policy

what contains general principles to guide computer user behavior?

Ethical computer use policy

What is the experts in technology who use their knowledge to into computers and computer networks, either for profit or just motivated by the challenge

Hackers

what is the forging of someone's identity for the purpose of fraud?

Identity theft

What is the act of conforming, acquiescing, or yielding information?

Information compliance

What is a method or system of government for information management or control?

Information governance

What examines the organizational resource of information and regulates its definitions, uses, value, and distribution ensuring it has the types of data/information required to function and grow effectively?

Information management

Which epolicy contains general principles regarding information privacy?

Information privacy policy

What is an ethical issue that focuses on who owns information about individuals and how information can be sold an d exchanged?

Information property

What is an ethical issue that focuses on who owns information about individuals and how information can be sold and exchanged

Information property

what is an ethical issue that focuses on who owns information about individuals and how information can be sold and exchanged

Information property

What is intangible creative work that is embodied in physical from and includes copyrights, trademarks, and patents?

Intellectual property

What occurs when a government attempts to control internet traffic, thus preventing some material from being viewed by a country's citizens/

Internet censorship

What occurs when a government attempts to control internet traffic, thus preventing some material from being viewed by a country's citizens?

Internet censorship

What sends a massive amount of email to a specific person or system that can cause that user's server to stop functioning?

Mail bomb

Which institute introduced an advanced encryption standard (AES) designed to keep government information secure?

National institute of standards and technology(NIST)

Three items typically found in an acceptable use policy

Not attempting to break the security of any computer network or user, Not performing any non repudiation, Not using the service as part of violationg any law

What is tangible protection such as alarms, guards, fireproof doors, fences, and vaults?

Physical security

What is the unauthorized use, duplication, distribution, or sale of copyrighted software?

Pirated software

What device that size of a credit card, containing embedded technologies that can store information and small amounts of software to perform some limited processing?

Smart card

Which policy outlines the corporate guidelines or principles governing employee online communication?

Social media policy

Which policy outlines the corporate guidelines or principles governing employee online communications?

Social media policy

Select three epolicies

Social media policy, Ethical computer use policy, and Acceptable use policy

The number that has the most widespread unintentional information reuse

Social security number

Three categories of authentication and authorization

Something the user knows, such as a user ID and password, something the user has, such as a smart card or token, something that is part of the user, such as a fingerprint or vice signature

What is unsolicited email?

Spam

What is an anti spamming approach where the receiving computer launches a return attack against the spammer. sending email messages back to the computer that originated the suspected spam?

Teergrubing

What Act was passed to protect minors from accessing inappropriate material on the internet?

The Child Online Protection Act

what are the small electronic devices that change user passwords automatically?

Tokens

What is a problem that occurs when someone registers purposely misspelled variations of well-known domain names?

Typo-squatting

What is accurate statements relating to an ethical computer use policy?

Users need to consent to following the rules and Users need to be informed of the rules

Software written with malicious intent to cause annoyance or damage?

Virus

Consist of one line of information for every visitor to a website and is usually stored on a webs server

Web log

What is the theft of a website's name that occurs when someone, posing as a site's administrator, changes the ownership of the domain name assigned to the website to another website owner?

Website name stealing

What tracks people's activities by such measures as number of keystrokes, error rate, and number of transactions processed.

Workplace MIS monitoring

What tracks people's activities by such measures as number of keystrokes, error rate, and number of transactions processed?

Workplace MIS monitoring

A group of computers on which a hacker has planted zombie programs

Zombie farm

Black hat hackers

break into other people's computer systems and may just look around or may steal and destroy information.

An organized attempt by a country's military to disrupt or destroy information and communication system for another country

cyber-war

What decodes information and opposite of encrypt?

decrypt

Select three items contained in a typical internet use policy

describes the internet services available to users, describes user responsibility for citing sources, States the ramifications if the policy is violated

Three items that contained in a typical internet use policy

describes the internet services available to users, describes user responsibility for citing sources, and states the ramifications if the policy is violated

Select the statement that accurately defines the association between information and ethics

information has no ethics

what security plan details how an organization will implement the information security policies

information security plan

A program that records every keystroke and mouse click

key logger

A contractual stipulation which ensures that ebusiness participants do not deny their online actions is called a

non repudiation

Backdoor program

opens a way into the network for tuture attacks

worm

spreads itself, not only from file to fikle, but also from computer to computer