Üdvözlöm, Ön a computer security szó jelentését keresi. A DICTIOUS-ban nem csak a computer security szó összes szótári jelentését megtalálod, hanem megismerheted az etimológiáját, a jellemzőit és azt is, hogyan kell a computer security szót egyes és többes számban mondani. Minden, amit a computer security szóról tudni kell, itt található. A computer security szó meghatározása segít abban, hogy pontosabban és helyesebben fogalmazz, amikor beszélsz vagy írsz. Acomputer security és más szavak definíciójának ismerete gazdagítja a szókincsedet, és több és jobb nyelvi forráshoz juttat.
(informatika) A számítógépes biztonság (angolul computer security), vagy más néven kiberbiztonság, a számítógépes rendszerek, hálózatok és adatvagyon védelmét jelenti a kibertámadásokkal, adatlopásokkal, kártékony programokkal és egyéb biztonsági fenyegetésekkel szemben. A számítógépes biztonság célja, hogy megvédje a rendszereket és adatokat a jogosulatlan hozzáféréstől, az adatok sérülésétől vagy elvesztésétől, és biztosítsa a rendszerek működőképességét.
A számítógépes biztonság három fő alappillére:
Bizalmasság (Confidentiality):
A bizalmasság azt jelenti, hogy az adatokhoz és rendszerekhez csak az arra jogosult személyek férhetnek hozzá. Ez védelmet nyújt a jogosulatlan hozzáférés és adatlopás ellen. Ezt például jelszavakkal, titkosítással és hozzáférés-szabályozással lehet biztosítani.
Sértetlenség (Integrity):
Az adatok sértetlensége azt biztosítja, hogy az információk pontosak és megbízhatóak maradjanak, és hogy azokat nem változtatták meg jogosulatlanul. Ez elengedhetetlen az üzleti és pénzügyi adatok, illetve más kritikus információk esetében.
Rendelkezésre állás (Availability):
A rendelkezésre állás azt jelenti, hogy a számítógépes rendszerek és adatok folyamatosan elérhetők a jogosult felhasználók számára. Ez magában foglalja a rendszerek túlterheltség elleni védelmét, az áramkimaradások, támadások (pl. DDoS) és egyéb leállások kezelését.
Főbb biztonsági fenyegetések:
Kártékony szoftverek (Malware):
A kártékony szoftverek, vagy malware-ek, olyan programok, amelyek ártalmasak a számítógépes rendszerekre. Ezek közé tartoznak a vírusok, férgek, trójaiak, kémprogramok és zsarolóprogramok. A malware-ek célja általában a rendszerek megrongálása, adatlopás, vagy pénzügyi haszonszerzés.
Adathalászat (Phishing):
Az adathalászat olyan csalási technika, amely során a támadók hamis email-üzeneteket vagy weboldalakat használnak, hogy érzékeny adatokat (például jelszavakat, banki információkat) szerezzenek meg a felhasználóktól.
Kibertámadások (Cyberattacks):
A kibertámadások sokféle formát ölthetnek, például:
DDoS (Distributed Denial of Service): A támadó túlterheli a célzott rendszert, elérhetetlenné téve azt a jogosult felhasználók számára.
SQL injection: Olyan támadás, amely során a támadó rosszindulatú SQL kódot injektál egy alkalmazás adatbázisába, hogy hozzáférjen érzékeny információkhoz.
Man-in-the-middle (MITM): Olyan támadás, amikor a támadó két kommunikáló fél között áll be, és lehallgatja, illetve módosítja az adatokat.
Social engineering (társadalmi manipuláció):
A social engineering olyan pszichológiai manipuláció, amely során a támadó a felhasználók bizalmába férkőzik, és rászedéssel szerez meg érzékeny adatokat. Ez magában foglalhat személyes interakciókat vagy online csalásokat.
Számítógépes biztonsági megoldások:
Tűzfalak (Firewalls):
A tűzfalak egy olyan védelmi eszközök, amelyek monitorozzák és szabályozzák a hálózati forgalmat az engedélyezett és tiltott forgalom meghatározása alapján. A tűzfalak megakadályozhatják a jogosulatlan forgalom bejutását a hálózatra.
Titkosítás (Encryption):
A titkosítás során az adatokat olvashatatlan formába alakítják, amelyet csak a jogosult felhasználók tudnak visszafejteni. Ez védi az adatokat az adathalászat, adatlopás vagy lehallgatás ellen, különösen érzékeny adatok továbbítása során (pl. online banki tranzakciók).
Antivírus szoftverek:
Az antivírus programok olyan eszközök, amelyek észlelik és eltávolítják a kártékony szoftvereket. Ezek a programok rendszeresen frissítik a kártékony szoftverek adatbázisát, hogy felismerjék és megvédjék a számítógépet az újabb fenyegetésektől.
Hozzáférés-szabályozás:
A hozzáférés-szabályozási rendszerek korlátozzák, hogy ki férhet hozzá bizonyos adatokhoz vagy rendszerekhez. Ez lehet jelszó alapú, biometrikus azonosítással történő vagy kétfaktoros hitelesítéssel védett rendszer.
VPN (Virtual Private Network):
A VPN lehetővé teszi, hogy a felhasználók biztonságos, titkosított kapcsolatot hozzanak létre az interneten keresztül. A VPN különösen hasznos, amikor nyilvános Wi-Fi-hálózatokat használnak, mivel megvédi az adatokat a lehallgatás ellen.
Riasztási rendszerek (IDS/IPS):
Az IDS (Intrusion Detection System) és az IPS (Intrusion Prevention System) rendszerek figyelik a hálózati forgalmat, és figyelmeztetéseket küldenek vagy automatikusan megelőző lépéseket tesznek, ha gyanús tevékenységet észlelnek.
Rendszerfrissítések és biztonsági javítások:
A rendszerek és alkalmazások rendszeres frissítése elengedhetetlen a biztonság fenntartásához. A frissítések gyakran tartalmaznak olyan biztonsági javításokat, amelyek a korábban felfedezett sebezhetőségek megszüntetésére szolgálnak.
Számítógépes biztonsági irányelvek és gyakorlatok:
Jelszóbiztonság:
A jelszavaknak erőseknek kell lenniük, és nem szabad könnyen kitalálható információkat tartalmazniuk (például születési dátum, családtagok neve). Érdemes jelszókezelőket használni, és időnként megváltoztatni a jelszavakat.
Kétfaktoros hitelesítés (2FA):
A kétfaktoros hitelesítés további biztonsági réteget biztosít azáltal, hogy egy második hitelesítési lépést (például SMS-ben kapott kód) kér a jelszó mellett.
Biztonsági mentések:
Rendszeres biztonsági mentések készítése kritikus fontosságú az adatok védelme érdekében, különösen zsarolóprogramok (ransomware) támadásainak esetében. Ha az adatokat eltávolítják vagy titkosítják, a biztonsági mentés lehetővé teszi azok visszaállítását.
Biztonsági tudatosság képzése:
Az alkalmazottak és felhasználók oktatása a számítógépes biztonsági fenyegetésekről segít a támadások megelőzésében. Az olyan technikák, mint a social engineering vagy az adathalászat felismerése és kezelése kulcsfontosságú lehet a szervezet biztonságának fenntartásában.
Computer security is commonly known as security applied to computing devices such as computers and smartphones, as well as computer networks such as private and public networks, including the whole Internet. The field covers all the processes and mechanisms by which digital equipment, information and services are protected from unintended or unauthorized access, change or destruction, and is of growing importance in line with the increasing reliance on computer systems of most societies worldwide.[1] Computer security includes measures taken to ensure the integrity of files stored on a computer or server as well as measures taken to prevent unauthorized access to stored data, by securing the physical perimeter of the computer equipment, authentication of users or computer accounts accessing the data, and providing a secure method of data transmission.
Essence of computer security
Computer security can be described as all of the following:
Access control – selective restriction of access to a place or other resource. The act of accessing may mean consuming, entering, or using. Permission to access a resource is called authorization.
Computer access control – includes authorization, authentication, access approval, and audit.
Physical security – protecting property and people from damage or harm (such as from theft, espionage, or terrorist attacks). It includes security measures designed to deny unauthorized access to facilities, (such as a computer room), equipment (such as your computer), and resources (like the data storage devices, and data, in your computer). If a computer gets stolen, then the data goes with it. In addition to theft, physical access to a computer allows for ongoing espionage, like the installment of a hardware keylogger device, and so on.
Data security – protecting data, such as a database, from destructive forces and the unwanted actions of unauthorized users.[2]
Information privacy – relationship between collection and dissemination of data, technology, the public expectation of privacy, and the legal and political issues surrounding them. Privacy concerns exist wherever personally identifiable information or other sensitive information is collected and stored – in digital form or otherwise. Improper or non-existent disclosure control can be the root cause for privacy issues.
Internet privacy – involves the right or mandate of personal privacy concerning the storing, repurposing, provision to third parties, and displaying of information pertaining to oneself via the Internet. Privacy can entail either Personally Identifying Information (PII) or non-PII information such as a site visitor's behavior on a website. PII refers to any information that can be used to identify an individual. For example, age and physical address alone could identify who an individual is without explicitly disclosing their name, as these two factors relate to a specific person.
Mobile security – security pertaining to smartphones, especially with respect to the personal and business information stored on them.
Network security – provisions and policies adopted by a network administrator to prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, which is controlled by the network administrator.
Internet security – computer security specifically related to the Internet, often involving browser security but also network security on a more general level as it applies to other applications or operating systems on a whole. Its objective is to establish rules and measures to use against attacks over the Internet. The Internet represents an insecure channel for exchanging information leading to a high risk of intrusion or fraud, such as phishing. Different methods have been used to protect the transfer of data, including encryption.
World Wide Web Security – dealing with the vulnerabilities of users who visit websites. Cybercrime on the Web can include identity theft, fraud, espionage and intelligence gathering. For criminals, the Web has become the preferred way to spread malware.
Computer security threats
The variety of threats combined with the rapid development of new threats has made cyber insecurity and the removal of information assurance the 'status quo'. As long as man continues to use the computer, man will also takes interest in manipulating, modifying, creating and bypassing 'rules' and 'security standards.'
The most common and effective method of violating computer security protocols is Phishing; Phishing is the process of providing a cloned login page for a site the victim uses, for example, Google's Gmail - once the user enters his/her login information, the data is captured and access to the victims account is gained.
Many corporations executive's, mid-ranking managers and even low level staff of many current U.S. corporations have no idea that a malicious user is quietly and passively intercepting their communications. Why? A strong motivation is the theft of Intellectual Property. Often victims of phishing either never become aware there privacy has been breached, or many months pass before they become aware that their privacy has been lost.[3]
Methods of Computer Network Attack and Computer Network Exploitation
Social engineering is a frequent method of attack, and can take the form of phishing, or spear phishing in the corporate or government world, as well as counterfeit websites.
Hard disk drive failure – occurs when a hard disk drive malfunctions and the stored information cannot be accessed with a properly configured computer. A disk failure may occur in the course of normal operation, or due to an external factor such as exposure to fire or water or high magnetic fields, or suffering a sharp impact or environmental contamination, which can lead to a head crash. Data recovery from a failed hard disk is problematic and expensive. Backups are essential
Loss of anonymity – when one's identity becomes known. Identification of people or their computers allows their activity to be tracked. For example, when a person's name is matched with the IP address they are using, their activity can be tracked thereafter by monitoring the IP address.
Cyber spying – obtaining secrets without the permission of the holder of the information (personal, sensitive, proprietary or of classified nature), from individuals, competitors, rivals, groups, governments and enemies for personal, economic, political or military advantage using methods on the Internet, networks or individual computers through the use of cracking techniques and malicious software including Trojan horses and spyware. It may be done online from by professionals sitting at their computer desks on bases in far away countries, or it may involve infiltration at home by computer trained conventional spies and moles, or it may be the criminal handiwork of amateur malicious hackers, software programmers, or thieves.
Packet analyzer (aka packet sniffer) – mainly used as a security tool (in many ways, including for the detection of network intrusion attempts), packet analyzers can also be used for spying, to collect sensitive information (e.g., login details, cookies, personal communications) sent through a network, or to reverse engineer proprietary protocols used over a network. One way to protect data sent over a network such as the Internet is by using encryption software.
Exploit – piece of software, a chunk of data, or a sequence of commands that takes advantage of a bug, glitch or vulnerability in order to cause unintended or unanticipated behavior to occur on computer software, hardware, or something electronic (usually computerized). Such behavior frequently includes things like gaining control of a computer system, allowing privilege escalation, or a denial-of-service attack.
Denial-of-service attack – an attempt to make a machine or network resource unavailable to its intended users, usually consisting of efforts to temporarily or indefinitely interrupt or suspend services of a host connected to the Internet. One common method of attack involves saturating the target machine with external communications requests, so much so that it cannot respond to legitimate traffic, or responds so slowly as to be rendered essentially unavailable.
Keylogger – program that does keystroke logging, which is the action of recording (or logging) the keys struck on a keyboard, typically in a covert manner so that the person using the keyboard is unaware that their actions are being monitored.[4] There are also HID spoofing hardware keyloggers, like a USB device inserting stored keystores when connected.
Rootkit – stealthy type of software, typically malicious, designed to hide the existence of certain processes or programs from normal methods of detection and enable continued privileged access to a computer.[5] The term rootkit is a concatenation of "root" (the traditional name of the privileged account on Unix operating systems) and the word "kit" (which refers to the software components that implement the tool).
Natural disasters – fire, flood, etc. can cause loss of computers and data. Either fire or water can cause a hard disk drive failure, for example. Earthquakes can cause a data center to go down. For this reason large web businesses use load balancing and failover techniques to ensure business continuity.
Payload - malicious code that is delivered to a vulnerable computer, often masquerading as something else
Physical loss – losing a computer (for example due to fire, or leaving one's laptop on a bus), results in data loss, unless there is a backup.
Physical theft – when someone takes property without authorization as his or her own. When a computer is stolen, the data is gone too, unless there is a backup.
Laptop theft – stealing a laptop computer. Victims of laptop theft can lose hardware, software, and essential data that has not been backed up. Thieves also may have access to sensitive data and personal information. Some systems authorize access based on credentials stored on the laptop including MAC addresses, web cookies, cryptographic keys and stored passwords.
Exploitable vulnerability – vulnerability for which an exploit exists
Open port – TCP or UDP port number that is configured to accept packets. Ports are an integral part of the Internet's communication model — they are the channel through which applications on the client computer can reach the software on the server. Services, such as web pages or FTP, require their respective ports to be "open" on the server in order to be publicly reachable. "Open" (reachable) is not enough for a communication channel to be established. There needs to be an application (service) listening on that port, accepting the incoming packets and processing them. Open ports are vulnerable when there is a service listening and there is no firewall filtering incoming packets to them.
Access control – selective restriction of access to a place or other resource. The act of accessing may mean consuming, entering, or using. Permission to access a resource is called authorization.
Computer access control – includes authorization, authentication, access approval, and audit.
Authorization – function of specifying access rights to computer resources. "To authorize" is to define an access policy. For example, human resources staff is normally authorized to access employee records and this policy is may be formalized as access control rules in a computer system. During operation, the computer system uses the access control rules to decide whether access requests from (authenticated) consumers shall be approved (granted) or disapproved (rejected). Resources include individual files or an item's data, computer programs, computer devices and functionality provided by computer applications. Examples of consumers are computer users, computer programs and other devices attempting to access data that is on a computer.
Authentication – act of confirming the identity of a consumer. In this context, a consumer is a computer user, computer program, or other device attempting to access data that is on a computer
User account – system ID unique to each user. It allows a user to authenticate (log in) to a system and to be granted authorization to access resources provided by or connected to that system; however, authentication does not imply authorization. To log in to an account, a user is typically required to authenticate oneself with a password or other credentials for the purposes of accounting, security, logging, and resource management.
Password – word or string of characters used for user authentication to prove identity or access approval to gain access to a resource (example: an access code is a type of password), which should be kept secret from those not allowed access.
Physical security – protecting property and people from damage or harm (such as from theft, espionage, or terrorist attacks). It includes security measures designed to deny unauthorized access to facilities, (such as a computer room), equipment (such as your computer), and resources (like the data storage devices, and data, in your computer). If a computer gets stolen, then the data goes with it. In addition to theft, physical access to a computer allows for ongoing espionage, like the installment of a hardware keylogger device, and so on. Examples of physical security system components include:
Locks – locks may be used to secure a building or room that a computer is in. They may also be used on computer casings to prevent opening computers to remove or swap out parts, or install unauthorized components. And they may be used on a computer to disallow it from being turned on or used without a physical key. There are also locks to attach cables to laptops to prevent them from being taken.
Data security – protecting data, such as a database, from destructive forces and the unwanted actions of unauthorized users.[2]
Information privacy
Information privacy – relationship between collection and dissemination of data, technology, the public expectation of privacy, and the legal and political issues surrounding them. Privacy concerns exist wherever personally identifiable information or other sensitive information is collected and stored – in digital form or otherwise. Improper or non-existent disclosure control can be the root cause for privacy issues.
Internet privacy – involves the right or mandate of personal privacy concerning the storing, repurposing, provision to third parties, and displaying of information pertaining to oneself via the Internet. Privacy can entail either Personally Identifying Information (PII) or non-PII information such as a site visitor's behavior on a website. PII refers to any information that can be used to identify an individual. For example, age and physical address alone could identify who an individual is without explicitly disclosing their name, as these two factors relate to a specific person.
Mobile security
Mobile security – security pertaining to smartphones, especially with respect to the personal and business information stored on them.
Network security
Network security – provisions and policies adopted by a network administrator to prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, which is controlled by the network administrator.
Internet security – computer security specifically related to the Internet, often involving browser security but also network security on a more general level as it applies to other applications or operating systems on a whole. Its objective is to establish rules and measures to use against attacks over the Internet. The Internet represents an insecure channel for exchanging information leading to a high risk of intrusion or fraud, such as phishing. Different methods have been used to protect the transfer of data, including encryption.
Virtual private network (VPN) – extends a private network across a public network, such as the Internet. It enables a computer or network-enabled device to send and receive data across shared or public networks as if it were directly connected to the private network, while benefiting from the functionality, security and management policies of the private network.[6] A VPN is created by establishing a virtual point-to-point connection through the use of dedicated connections, virtual tunneling protocols, or traffic encryptions.
IPsec – protocol suite for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session. IPsec can be used in protecting data flows between a pair of hosts (host-to-host), between a pair of security gateways (network-to-network), or between a security gateway and a host (network-to-host).
OpenVPN – open-source software application that implements virtual private network (VPN) techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. It uses a custom security protocol that utilizes SSL/TLS for key exchange. It is capable of traversing network address translators (NATs) and firewalls. It was written by James Yonan and is published under the GNU General Public License (GPL).
World Wide Web Security
World Wide Web Security – dealing with the vulnerabilities of users who visit websites. Cybercrime on the Web can include identity theft, fraud, espionage and intelligence gathering. For criminals, the Web has become the preferred way to spread malware.
AV-TEST – independent organization which evaluates and rates antivirus and security suite software[7] for Microsoft Windows and Android operating systems,[8] according to a variety of criteria. Every other month, the researchers publish the results of their testing,[9][10] where they list which products they awarded their certification.[11] The organisation is based in Magdeburg, in Germany.[9][11]
ICSA Labs – independent division of Verizon Business that tests and certifies computer security software (including anti-spyware, anti-virus, and firewall products), for a fee.
Virus Bulletin – magazine that conducts tests of anti-virus software. The magazine itself is about the prevention, detection and removal of malware and spam. It regularly features analyses of the latest virus threats, articles exploring new developments in the fight against viruses, interviews with anti-virus experts, and evaluations of current anti-malware products.
West Coast Labs – tests computer security products for a fee. Its Checkmark Certification program reports test results to the public.[12]
Computer security companies
McAfee, Inc. (Intel Security) – American global computer security software company headquartered in Santa Clara, California, and the world's largest dedicated security technology company.[13] On February 28, 2011, McAfee became a wholly owned subsidiary of Intel.[14][15] In early 2014, Intel announced it would rebrand McAfee as Intel Security in 2014.[16]
2600: The Hacker Quarterly – technical and political articles of interest to the internet security community
Virus Bulletin – magazine about the prevention, detection and removal of malware and spam. It regularly features analyses of the latest virus threats, articles exploring new developments in the fight against viruses, interviews with anti-virus experts, and evaluations of current anti-malware products.
CERIAS – a center for research and education of information security for computing and communication infrastructures located at Purdue University.[17]
CERT Coordination Center – A program of Carnegie-Mellon University that develops advanced methods and technologies to counter large-scale, sophisticated cyber threats in partnership with other academic programs and with government and law enforcement agencies. The Cert Knowledgebase compiles information on information security incidents.[18]
Georgia Tech Information Security Center – department of Georgia Tech that deals with information security issues such as cryptography, network security, trusted computing, software reliability, privacy, and internet governance.[19]
Oulu University Secure Programming Group – studies, evaluates and develops methods of implementing and testing application and system software in order to prevent, discover and eliminate implementation level security vulnerabilities in a pro-active fashion. The focus is on implementation level security issues and software security testing.
Microsoft Digital Crimes Unit – a Microsoft sponsored team of international legal and technical experts to stop or interfere with cyber crime and cyber threats.[21]
Government agencies
ARNES – Academic and Research Network of Slovenia, which is responsible for development, operation and management of the communication and information network for education and research. It includes the SI-CERT, the Slovenian Computer Emergency Response Team.
Internet police – police and secret police departments and other law enforcement agencies in charge of policing the Internet. The major purposes of Internet police, depending on the state, are fighting cybercrime, as well as censorship, propaganda, and monitoring and manipulating the online public opinion.
FBI Cyber Division – Federal Bureau of Investigation division that heads the national effort to investigate and prosecute internet crimes, including "cyber based terrorism, espionage, computer intrusions, and major cyber fraud." This division of the FBI uses the information it gathers during investigation to inform the public of current trends in cyber crime.[27] It focuses around three main priorities: computer intrusion, identity theft, and cyber fraud. It was created in 2002.[28]
National Security Agency – The United States Bureau responsible for national cybersecurity and military communications protection.[29]
US-CERT – also known as the United States Computer Emergency Readiness Team, organization within the Department of Homeland Security's (DHS) National Protection and Programs Directorate (NPPD); a branch of the Office of Cybersecurity and Communications' (CS&C) National Cybersecurity and Communications Integration Center (NCCIC).[30] US-CERT is responsible for analyzing and reducing cyber threats, vulnerabilities, disseminating cyber threat warning information, and coordinating incident response activities.[31]
Australian Information Security Association – organisation for individuals rather than companies that aims to maintain an unbiased view of information security in Australia. Hosts 2 conferences annually.
Information Card Foundation – created by Equifax, Google, Microsoft, Novell, Oracle Corporation, PayPal and others, to promote the Information Card approach. Information Cards are personal digital identities that people can use online, and the key component of Identity metasystems.
Attrition – information security-related website, updated at least weekly by an all-volunteer staff. The "Errata" section is devoted to pointing out inaccuracies, omissions, and other problems with mainstream media related to computer security and hacking. Additionally, staff members publish opinion pieces such as "Security Rants" pointing out problems with the computer security industry.
John McAfee – founded McAfee Associates (later called McAfee, Inc.; Intel Security) in 1987, resigned from the company in 1994. At the DEF CON conference in Las Vegas, Nevada in August 2014, he warned Americans not to use smartphones, suggesting apps are used to spy on clueless consumers who do not read privacy user agreements.[33]
Phil Zimmermann – creator of Pretty Good Privacy (PGP), the most widely used email encryption software in the world.[34] He is also known for his work in VoIP encryption protocols, notably ZRTP and Zfone. He was a principal designer of the cryptographic key agreement protocol (the "association model") for the Wireless USB standard.
Monica S. Lam -- Stanford University computer science professor, director of its MobiSocial Computing Laboratory, involved in Programmable Open Mobile Internet 2020 of the National Science Foundation.
↑ (2018. június 12.) „The Future Cybersecurity Workforce: Going Beyond Technical Skills for Successful Cyber Performance”. Frontiers in Psychology9, 744. o. DOI:10.3389/fpsyg.2018.00744. ISSN1664-1078. PMID 29946276.