VCE Applied Computing - U2O2 - Cyber Security Hangman

The 74 key terms

1Emerging trend

A new threat, technology or practice reshaping cyber security, meaning current controls may need to be updated to stay effective.

2Regulatory compliance

Meeting the legal and industry rules that govern how an organisation must secure its data and systems.

3Zero Trust Architecture

A security model that trusts no user or device by default and verifies every request, even from inside the network.

4Router

A hardware device that connects multiple networks together and forwards data between them toward its destination.

5Switch

A device that connects multiple devices within one network and forwards data only to the device it is intended for.

6Firewall

A device or program that monitors and controls incoming and outgoing network traffic according to defined security rules.

7Data storage system

The hardware and software an organisation uses to hold its data for ongoing access.

8Backup system

A system that creates and retains separate copies of data so it can be recovered if the original is lost.

9Firewall software

A program installed on a single device that filters its incoming and outgoing traffic using security rules.

10Antivirus software

A program that detects, blocks and removes malicious programs from a device.

11AI-based network security software

Software that learns an organisation's normal network behaviour and flags deviations from it.

12Intrusion detection system (IDS)

A system that monitors network traffic for suspicious activity and raises an alert when it finds it.

13Intrusion prevention system (IPS)

A system that sits inline in the traffic path, detects threats, and automatically blocks them before they reach the network.

14Wired communications technology

Technology that carries data through physical cable between fixed connection points, offering high speed and reliability but no mobility.

15Wireless communications technology

Technology that carries data through radio waves within range of an access point, offering mobility but limited range and security.

16Mobile communications technology

Technology that carries data through cellular towers, giving connectivity across wide geographic areas.

17Comparison measures

The four criteria used to compare wired, wireless and mobile technologies: cost, data storage options, reliability and security.

18The internet

The global public network of interconnected networks that communicate using shared protocols.

19Intranet

A private network that uses internet technologies but is restricted to one organisation's members.

20VPN

A virtual private network creates an encrypted tunnel across a public network so a remote user can access a private network securely.

21LAN

A network that connects devices within a single limited location, such as a school, home or office building.

22WAN

A network that connects devices or LANs separated across large geographic distances.

23WPAN

A network that wirelessly connects devices over a very short range around one person, typically using Bluetooth.

24Global exposure

The risk an organisation faces from cyber threats that can originate from any country because its systems are connected to the internet

25Data privacy risk

The danger that personal data loses protection as it crosses international networks with differing privacy laws

26Jurisdictional compliance

Meeting the different legal requirements of each country or region a business operates in

27Unauthorised access

Gaining entry to a network or system without permission, often to steal or damage data

28Malware

Malicious software designed to damage, disrupt, or gain unauthorised access to a computer system

29Spyware

Malware that secretly monitors a user's activity and collects information without their knowledge or consent

30Virus

Malware that attaches to a host file and spreads by replicating itself when a user runs the infected file

31Worm

Malware that spreads by replicating itself across a network without needing a host file or user action

32Ransomware

Malware that encrypts or locks a victim's files and demands payment to restore access

33Denial of service attack

An attack that floods a target with traffic, overwhelming its resources and blocking legitimate users

34Improper credential management

When passwords, keys or tokens are stored, shared or reused insecurely, letting attackers steal them and gain unauthorised access.

35Outdated software

Software that hasn't been updated with the latest security patches, leaving known vulnerabilities open for attackers to exploit.

36Weak password

A password that is short, common, or predictable, making it easy for attackers to guess or crack.

37Multi-factor authentication

A login method that requires two or more independent proofs of identity, such as a password plus a one-time code.

38Applying firmware

Installing the latest low-level software on a hardware device to patch known security vulnerabilities.

39Backup strategy

A plan for how and when backups are taken and stored, such as scheduling regular backups and keeping copies in multiple locations.

40Operating system update

Installing the latest patches for the OS, fixing known security vulnerabilities and bugs.

41Malware definition update

Refreshing the database used by security software so it can recognise and detect newly discovered threats.

42Staff procedure

A documented rule employees must follow, such as reporting incidents or locking devices, to reduce cyber security risk.

43Encryption

Turning a readable message into a scrambled, unreadable message using a key, so it can only be read again with decryption.

44Caesar cipher

A cipher that encrypts a message by shifting each letter forward by a fixed number, and decrypts it by shifting each letter back by the same number.

45Polyalphabetic cipher

A cipher that uses a repeating list of shift numbers, so different letters in a message are shifted by different amounts.

46Vigenere cipher

A cipher that uses a keyword, where each keyword letter sets a different shift for the matching letter of the message.

47Symmetric encryption

Using the exact same secret key to both lock and unlock a message.

48AES

A widely used method of symmetric encryption that uses one shared key, which can be 128, 192, or 256 bits long, to lock and unlock data.

49Asymmetric encryption

Encryption that uses a linked pair of keys: a public key to encrypt data and a private key to decrypt it, with no shared secret key needed.

50RSA

A way of locking and unlocking messages using two matching keys: a public key anyone can have, and a private key kept secret by its owner.

51ECDH

A method where two people each combine their own secret with the other's shared piece, ending up with the same matching result without sending the secret.

52ECDSA

A digital signature algorithm that uses a private key to sign a message and the matching public key to verify it.

53Machine learning traffic analysis

Using a trained model to classify network traffic as normal or anomalous, based on learned patterns rather than fixed rules.

54Real-time monitoring

Continuously checking network activity as it happens and immediately alerting the right people when a threat is detected.

55Ethical hacking

Authorised testing of a system to find security vulnerabilities before malicious attackers can exploit them.

56The Essential Eight

A set of eight baseline security strategies created by the Australian government to help reduce the risk of cyber security incidents.

57Information Security Manual

A document created by the Australian government that provides detailed guidance organisations can follow to protect their systems and data.

58ISM encryption guideline

A rule that tells organisations to encrypt sensitive data, both when stored and when sent, so it stays protected.

59ISM segmentation guideline

A rule that tells organisations to divide their network into separate zones and limit access between them, so a breach stays contained.

60ISM access controls guideline

A rule that tells organisations to only give people access to the parts of the network they actually need, after checking who they are.

61Wireless traffic confidentiality and integrity

Keeping wireless data private (confidentiality) and making sure it has not been altered (integrity).

62Wireless network footprint

How far a wireless signal reaches, which should be limited to the needed area to reduce risk.

63Privacy Act 1988

Commonwealth legislation that sets rules for how organisations must collect, use, and store people's personal information.

64Australian Privacy Principle 1

Requires organisations to be open and transparent about managing personal information, with a clear, available, up-to-date policy.

65Australian Privacy Principle 6

Requires organisations to only use or disclose personal information for the purpose it was originally collected for, unless consent or an exception applies.

66Australian Privacy Principle 11

Requires organisations to protect personal information from misuse, loss, and unauthorised access, and to destroy it when no longer needed.

67Health Records Act 2001

Victorian legislation that sets rules for how health information must be collected and kept secure by public and private providers.

68Health Privacy Principle 2

Requires health information to be used or disclosed only for the purpose it was originally collected for, unless consent or an exception applies.

69Health Privacy Principle 4

Requires organisations to take reasonable steps to keep health information accurate, complete, and up to date.

70Health Privacy Principle 5

Requires organisations to be open and transparent about managing health information, with a clear, available, up-to-date policy.

71Privacy and Data Protection Act 2014

Victorian legislation that sets rules for how the Victorian public sector must collect and securely protect personal information.

72Information Privacy Principle 2

Requires personal information to be used or shared only for the purpose it was originally collected for, unless consent or an exception applies.

73Information Privacy Principle 4

Requires organisations to take reasonable steps to protect personal information from misuse, loss, unauthorised access, and unwanted modification.

74Information Privacy Principle 5

Requires organisations to be open and transparent about managing personal information, with a clear, available, up-to-date policy.