CERT CERT is a leading international center of Internet security expertise, located at the Software Engineering Institute, a federally funded research and development center operated by Carnegie Mellon University. Established to study Internet security vulnerabilities, research long-term changes in networked systems, and develop information and training to improve security. US-CERT was established in 2003 under the US Department of Homeland Security to protect the Internet infrastructure, coordinates a defense against and responses to cyber attacks.
Certificate.
An encrypted file containing user or server identification information which is used to verify identity and to help establish a security-enhanced link.
Children’s Online Privacy Protection Act (COPPA).
A U.S. law that took effect on April 21, 2000, and requires parental consent for certain Web sites to knowingly collect personally identifiable information on children under the age of 13
Cipher.
The method used to transform a readable message (called plaintext or cleartext) into an unreadable, scrambled or hidden message (called ciphertext).
Ciphertext.
Ciphertext is the output of an encryption process and can be transformed back into a readable form plaintext with the appropriate decryption key.
Computer security.
The protection of information assets through the use of technology, processes, and training.
Computer-virus.
A computer virus is a self-replicating program containing code that explicitly copies itself and can “infect” other programs by modifying them or their environment such that a call to an infected program implies a call to a (possibly evolved) copy of the virus. See Viruses in Depth
Content-Advisor.
A tool in a web browser such as Microsoft Internet Explorer or Mozilla Firefox that lets you control which sites users on your computer can visit. This is particularly helpful for parents who want to control the content their children view on the Web.
Cookie.
A small data file that is stored on a user’s local computer for record-keeping purposes and which contains information about the user that is pertinent to a Web site, such as personal preferences.
Crackers.
Often early stage hackers, noted for the use of cracker slang (which is often called “leet-speak”) so the reader will be able to understand both what leaks out of the cracker underground and the occasional ironic use by hackers. Warez usage; Always substitute ‘z’s for ‘s’s. (i.e. “codes” = “codez”). The substitution of ‘z’ for ‘s’ has evolved so that a ‘z’ is now systematically put at the end of words to denote an illegal or cracking connection. Examples : Appz, passwordz, passez, utilz, MP3z, distroz, pornz, sitez, gamez, crackz, serialz, downloadz, FTPz, etc.
Credentials.
Information that includes identification and proof of identification that is used to gain access to local and network resources. Examples of credentials are user names and passwords, smart cards, and certificates.
Cryptography.
Is an interdisciplinary subject, drawing from several fields. Older forms of cryptography were chiefly concerned with patterns in language. More recently, the emphasis has shifted, and cryptography makes extensive use of mathematics, particularly discrete mathematics, including topics from number theory, information theory, computational complexity, statistics and combinatorics. Cryptography is also considered a branch of engineering, but it is considered to be an unusual one as it deals with active, intelligent and malevolent opposition (see cryptographic engineering and security engineering). An active area of research studies the relationship between cryptographic problems and quantum physics (see quantum cryptography and quantum computing). And in the everyday world, cryptography is a tool used within computer and network security.
Cryptology.
Is a field of mathematics and computer science concerned with information security and related issues, particularly encryption and authentication.