CompTIA CySA+ complete index with explanation

forwarding

Routing e-mail through another organization’s e-mail system. From the Library of Matthias Boeker Glossary of Key Terms 665

framework

A methodology designed to help guide security professionals.

Function as a Service (FaaS)

An extension of Platform as a Service (PaaS) that goes further and completely abstracts the virtual server from the developers. Charges are based not on server instance sizes but on consumption and executions.

fuzzing

Injecting invalid or unexpected input (sometimes called faults) into an application to test how the application reacts.

geofencing

The application of geographic limits to where a device can be used.

geotagging

The process of adding geographical identification metadata to various media.

Gramm-Leach-Bliley Act (GLBA) of 1999

Affects all financial institutions, including banks, loan companies, insurance companies, investment companies, and credit card providers.

graphical password

A type of password that uses graphics as part of the authentication mechanism; also called CAPTCHA password.

hacker

An individual who attempts to break into secure systems to obtain knowledge about the systems and possibly use that knowledge to carry out pranks or commit crimes.

hardening

Removing unnecessary functions to reduce the attack surface.

hardware security module (HSM)

An appliance that safeguards and manages digital keys used with strong authentication and provides crypto processing.

hashing

The process of using a hashing algorithm to reduce a large document or file to a character string that can be used to verify the integrity of the file.

Health Care and Education Reconciliation Act of 2010

Affects healthcare and educational organizations. This act increased some of the security measures that must be taken to protect healthcare information.

Health Insurance Portability and Accountability Act (HIPAA)

Legislation that specifies security protocols for all organizations that handle private health information (PHI).

heap overflow

A buffer overflow that occurs in the heap data area. Heap overflows are exploitable in a different manner to that of stack-based overflows.

Helix

A live CD with which you can acquire evidence and make drive images without affecting the data on the host.

heuristics

Analysis that determines the susceptibility of a system to a particular threat/risk using decision rules or weighing methods.

HIPAA Breach Notification Rule

Requires HIPAA covered entities and their business associates to provide notification following a breach of unsecured protected health information (PHI).

honeypot

A system that is configured to be attractive to hackers and to lure them into spending time attacking it while information is gathered about the attack.

host scanning

A process that involves identifying the live hosts on a network or in a domain namespace.