AP Computer Science Principles Chapter 17 Study Guide Questions & Answers

Information Security - ANSWERSThe techniques and policies used to ensure proper access to data CIA Triad - ANSWERSConfidentiality, Availability, Integrity Confidentiality - ANSWERSEnsuring that data is protected from unauthorized access Availability - ANSWERSThe degree to which authorized users can access information for legitimate purposes Integrity - ANSWERSEnsuring that data can be modified only by appropriate mechanisms Risk Analysis - ANSWERSDetermining the nature and likelihood of the risks to key data and Goal is to minimize vulnerability to threats that put a system at the most risk Preventing Unauthorized Access - ANSWERSComputers ask for authentication credentials Authentication credentials - ANSWERSInformation users provide to identify themselves for computer access Examples of Authentication Credentials - ANSWERSUser knowledge, Smart card, Biometrics User knowledge - ANSWERSName, password, PIN Smart card - ANSWERSA card with an embedded memory chip used for identification Biometrics - ANSWERSHuman characteristics such as fingerprints, retina or voice patterns Guidelines for passwords - ANSWERSEasy to remember, hard to guess • Don't use family or pet names • Don't make it accessible • Use combination uppercase/lowercase letters, digits and special characters • Don't leave computer when logged in • Don't ever tell anyone • Don't include in an email • Don't use the same password in lots of places reCAPTCHA - ANSWERSSoftware that helps digitize books at the same time Fingerprint analysis - ANSWERSa stronger level of verification than username and password iPhone Touch ID Malicious Code - ANSWERSA computer program that attempts to bypass appropriate authorization and/or perform unauthorized functions Worm - ANSWERSstands alone, targets network resources Trojan Horse - ANSWERSdisguised as benevolent resource Virus - ANSWERSself-replicating Logic Bomb - ANSWERSset up to execute at system event Antivirus Software - ANSWERSSoftware installed to detect and remove malicious code Signature detection - ANSWERSrecognizes known malware and removes Heuristics - ANSWERSare strategies used to identify general patterns Security Attacks - ANSWERSPassword guessing, phishing, Spoofing, back door Phishing - ANSWERSTrick users into revealing security information Spoofing - ANSWERSMalicious user masquerades as authorized user Back Door - ANSWERSUnauthorized access to anyone who knows it exists Buffer overflow - ANSWERSDefect that could cause a system to crash and leave the user with heightened privileges Denial-of-service - ANSWERSAttack that prevents authorized user from accessing the system Man-in-the-middle - ANSWERSNetwork communication is intercepted in an attempt to obtain key data Cryptography - ANSWERSThe field of study related to encoded information (comes from Greek word for "secret writing") Encryption - ANSWERSThe process of converting plaintext into ciphertext Decryption - ANSWERSThe process of converting ciphertext into plaintext