CompTIA CySA+ complete index with explanation

backdoor/trapdoor

A mechanism implemented in many devices or applications that gives the user who uses the backdoor unlimited access to the device or application.

Basel II

International accord that addresses minimum capital requirements, supervisory review, and market discipline of financial institutions.

bash

A scripting language that is used to work in the Linux interface.

bastion host

Device exposed directly to the Internet or to any untrusted network while screening the rest of the network from exposure.

beaconing

Traffic that leaves a network at regular intervals.

big data

Sets of data so large or complex that they cannot be analyzed by using traditional data processing applications.

blacklisting

The process of identifying and blocking as bad senders a list of unacceptable e-mail addresses, Internet addresses, websites, applications, or some other identifier. Occurs when a list of unacceptable e-mail addresses, Internet addresses, websites, applications, or some other identifier is configured as bad senders or as not allowed to send while allowing all others. See also whitelisting.

blocks cipher

Cipher that performs encryption by breaking the message into fixed-length units.

blue team

A group of technicians who acts as the network defense team during testing.

botnet

A type of malware that installs a bot with the ability to connect back to the hacker’s computer. After that, his server controls all the bots located on these machines.

bring your own device (BYOD) policy

Policy designed to allow personal devices in the network.

buffer overflow

An attack that occurs when the amount of data that is submitted is larger than the buffer can handle.

Building Automation and Control Networks (BACnet) protocol

An application, network, and media access control (MAC) layer communications service. It can operate over a number of Layer 2 protocols, including Ethernet.

Burp Suite

A suite of tools used for testing web applications.

bus encryption

Protects the data traversing hardware buses. From the Library of Matthias Boeker Glossary of Key Terms 657

Business Continuity Planning (BCP) committee

Performs vulnerability analysis and risk assessment.

business impact analysis (BIA)

Lists the critical and necessary business functions, their resource dependencies, and their level of criticality to the overall organization.

Cain and Abel

A well-known password cracking program.

call list/escalation list

A list of contact information for all individuals, such as first responders, who might need to be alerted during the investigation of an incident.

Capability

Corner of the Diamond Model that describes the attacker intrusion tools and techniques.