Ch 5

What counterattacks can be taken against causes of unplanned downtime?

How many transactions can the company afford to lose without significantly harming business?

How much downtime should be scheduled for each day, week, month, and year?

 How can downtime be used to improve business processes and productivity?

They break into other people's computer systems and may look around or may steal and destroy information.

They work at the request of the system owners to find system vulnerabilities and plug the holes.

They have philosophical and political reasons for breaking into systems and will often deface the website as a protest.

They find hacking codes on the internet and point-and-click their way into systems to cause damage or spread viruses.

Software written with malicious intent to cause annoyance or damage

Malicious software that spreads itself not only from file to file but also from computer to computer

 A special class of adware that collects user data and transmits it over the internet without the user's knowledge or permission

A technology expert who breaks into computers and computer networks, either for profit or simply for the challenge

Malicious software that spreads itself not only from file to file but also from computer to computer

A technology expert who breaks into computers and computer networks, either for profit or simply for the challenge

 A form of malicious software that infects a computer and blocks all access to the computer until given some form of payment

 Software written with malicious intent to cause annoyance or damage

Malicious software that spreads itself not only from file to file but also from computer to computer

 Software that claims to serve a useful function, but its main purpose is to allow internet advertisers to display advertisements without the consent of the computer user

A form of malicious software that infects a computer and blocks all access until given some form of payment

A special class of adware that collects user data and transmits it over the internet without the user's knowledge or permission

A special class of adware that collects user data and transmits it over the internet without the user's knowledge or permission

Malicious software that spreads itself not only from file to file but also from computer to computer

Software written with malicious intent to cause annoyance or damage

Software that claims to serve some useful function, but its main purpose is to allow internet advertisers to display advertisements without the consent of the computer user

A special class of adware that collects user data and transmits it over the internet without the user's knowledge or permission

Malicious software that spreads itself not only from file to file but also from computer to computer

A technology expert who breaks into computers and computer networks, either for profit or simply for the challenge

A form of malicious software that infects a computer and blocks all access until given some form of payment

The system functions correctly and provides accurate information.

The system is easy to learn, efficient, and satisfying to use.

The system has varying levels defining what system users are allowed to access, view, or perform.

 The system is available to operate on different devices or software platforms.

 The system is available to operate on different devices or software platforms.

The system can adapt to the increased demands of growth.

 The system has varying levels defining what system users are allowed to access, view, or perform.

The system is operational during different time frames.

The ability for a system to respond to unexpected failures or system crashes as the backup system immediately and automatically takes over with no loss of service

 A system characteristic ensuring that all systems are functioning correctly and providing accurate information

A measure of how quickly a system performs a certain process or transaction

A time when a system is not operating or cannot be used

Durability

 Retractability

 Testability

 Accessibility

A trusted third party that validates user identities through digital certificates

 A data file that identifies individuals or organizations online and is comparable to a digital signature

A security process that requires more than two means of authentication, such as what the user knows, what the user has, and what the user is

A detailed description of how an organization will implement information security policies

Privilege escalation

Spear phishing

Social engineering

 Identity theft

 A security process that requires more than two means of authentication, such as what the user knows, what the user has, and what the user is

 A rule required to maintain information security

A security process that requires the user to provide two means of authentication: what the user knows and what the user has

 The traditional security process, which requires a username and password

 An attack that reroutes requests for legitimate websites to false websites

A network intrusion attack that takes advantage of programming errors or design flaws to grant an attacker elevated access to a network and its associated data and applications

 A process in which hackers use their social skills to trick people into revealing access credentials or other valuable information

 A phishing expedition in which emails are carefully designed to target a particular person or organization

 Reliability

 Scalability

 Maintainability

 Accessibility