Flashcards › Technology & Coding › Security

Cybersecurity Basics

Common threats, defenses and security ideas explained simply.

76 cardsGrades 6–8, Grades 9–12, College, Adult#cybersecurity#security#encryption#threats

0 of 76 known
76 cards
  • CybersecurityTerm
    Protecting computers, networks and data from attack
  • CIA triadTerm
    Confidentiality, Integrity, Availability
  • ConfidentialityTerm
    Only authorized people can see the data
  • IntegrityTerm
    Data is accurate and has not been tampered with
  • AvailabilityTerm
    Systems and data are usable when needed
  • ThreatTerm
    Something that could cause harm
  • VulnerabilityTerm
    A weakness that can be exploited
  • ExploitTerm
    A way to take advantage of a vulnerability
  • RiskTerm
    The chance a threat uses a vulnerability and causes harm
  • MalwareTerm
    Harmful software
  • VirusTerm
    Malware that attaches to files and spreads
  • WormTerm
    Malware that spreads by itself over networks
  • Trojan horseTerm
    Malware disguised as something useful
  • RansomwareTerm
    Malware that locks files and demands payment
  • SpywareTerm
    Software that secretly watches what you do
  • AdwareTerm
    Software that shows unwanted ads
  • KeyloggerTerm
    Malware that records keystrokes
  • BotnetTerm
    A network of infected computers controlled by an attacker
  • PhishingTerm
    Fake messages that trick you into giving information
  • Spear phishingTerm
    Phishing aimed at a specific person
  • SmishingTerm
    Phishing by text message
  • Social engineeringTerm
    Tricking people rather than breaking technology
  • PretextingTerm
    Inventing a story to gain trust
  • Brute force attackTerm
    Trying many passwords until one works
  • Dictionary attackTerm
    Trying common words as passwords
  • Credential stuffingTerm
    Reusing leaked passwords on other sites
  • DDoS attackTerm
    Flooding a site with traffic to knock it offline
  • Man-in-the-middle attackTerm
    An attacker secretly intercepts communication
  • SQL injectionTerm
    Sneaking harmful database commands into input
  • Cross-site scripting (XSS)Term
    Injecting harmful scripts into web pages
  • Zero-dayTerm
    A vulnerability unknown to the maker, with no fix yet
  • PatchTerm
    An update that fixes a vulnerability
  • Software updatesTerm
    Install them promptly to close security holes
  • Strong passwordTerm
    Long and unique, not reused
  • PassphraseTerm
    A long password made of several words
  • Password managerTerm
    A tool that stores unique passwords safely
  • Multi-factor authenticationTerm
    Requiring two or more proofs of identity
  • AuthenticationTerm
    Proving who you are
  • AuthorizationTerm
    What you're allowed to do after logging in
  • BiometricsTerm
    Using fingerprints or faces to identify you
  • EncryptionTerm
    Scrambling data so only holders of a key can read it
  • DecryptionTerm
    Unscrambling encrypted data
  • Symmetric encryptionTerm
    Uses the same key to lock and unlock
  • Asymmetric encryptionTerm
    Uses a public key to lock and a private key to unlock
  • Public keyTerm
    A key you can share
  • Private keyTerm
    A key you keep secret
  • HashTerm
    A fixed-length fingerprint of data, hard to reverse
  • SaltTerm
    Random data added to a password before hashing
  • Digital signatureTerm
    Proof that a message came from a certain sender
  • CertificateTerm
    A digital ID that proves a website is who it claims to be
  • HTTPSTerm
    Secure web connections that use encryption
  • VPNTerm
    Creates an encrypted tunnel for your traffic
  • FirewallTerm
    Blocks unwanted network traffic
  • AntivirusTerm
    Software that detects malware
  • Intrusion detection systemTerm
    Monitors a network for suspicious activity
  • SandboxTerm
    A safe isolated space to run untrusted code
  • BackupTerm
    A copy of data kept separately
  • 3-2-1 backup ruleTerm
    3 copies, 2 types of media, 1 offsite
  • Least privilegeTerm
    Giving users only the access they need
  • Defense in depthTerm
    Using many layers of protection
  • Penetration testingTerm
    Authorized hacking to find weaknesses
  • White hat hackerTerm
    An ethical hacker who helps improve security
  • Black hat hackerTerm
    A criminal hacker
  • Gray hat hackerTerm
    A hacker between ethical and criminal
  • Bug bountyTerm
    A reward for responsibly reporting security flaws
  • Data breachTerm
    When private data is exposed
  • Identity theftTerm
    Using someone's personal information without permission
  • Public Wi-Fi riskTerm
    Others may snoop; avoid sensitive logins
  • Suspicious email cluesTerm
    Urgent threats, odd sender, bad links, requests for passwords
  • Hover before clickingTerm
    Check where a link really goes
  • Never shareTerm
    Passwords or verification codes with anyone
  • Incident responseTerm
    The plan for handling a security event
  • CipherTerm
    A method of encrypting text
  • Caesar cipherTerm
    Shifts each letter by a fixed number
  • EnigmaTerm
    A cipher machine used by Germany in World War II
  • Kerckhoffs's principleTerm
    A system should be secure even if everything but the key is public

Download this deck

Want paper cards? Paste the plain-text download into the flashcard maker.