Across
- 1. Authentication using physical characteristics
- 5. Software designed to damage or compromise systems
- 7. Malware that spreads itself across networks
- 8. Information used to prove identity
- 9. Software that displays unwanted advertisements
- 11. Potential for loss due to a threat
- 14. Process of verifying a user's identity
- 17. Practice of separating networks to improve security
- 19. Formal review of security controls
- 21. Network of compromised devices controlled remotely
- 22. Potential cause of harm to a system
- 23. Platform that collects and analyzes security logs
- 26. Secret string used to authenticate a user
- 28. Weakness that could be exploited by an attacker
- 30. Process of converting data into an unreadable format
- 33. Team responsible for monitoring security events
- 35. Malware disguised as legitimate software
- 36. Phishing conducted through phone calls
- 40. Malware designed to hide its presence on a system
- 42. Phishing attack targeting executives
- 44. Code that takes advantage of a vulnerability
- 45. Level of access granted to a user
- 48. Impersonating a trusted source to deceive users
- 50. Vulnerability exploited before a fix is available
Down
- 2. Device connected to a network
- 3. Software that secretly monitors user activity
- 4. Unauthorized exposure of sensitive information
- 6. Notification of suspicious activity
- 10. Investigation and analysis of cyber incidents
- 12. Event that violates security policy
- 13. Security system that filters network traffic
- 15. Practice of protecting systems, networks, and data
- 16. Phishing conducted through text messages
- 18. Adherence to security standards and regulations
- 20. Technology that prevents sensitive data from leaving an organization
- 24. Security method requiring multiple forms of verification
- 25. Fraudulent attempt to steal information through email or messages
- 27. Process of granting access permissions
- 29. Malware that locks data and demands payment
- 31. Software update that fixes vulnerabilities
- 32. Employee or contractor who poses a security risk
- 34. Malware that records keystrokes
- 37. Fixed-length value generated from data
- 38. Software designed to detect and remove malicious code
- 39. Copy of data used for recovery purposes
- 41. Digital credential used for access or verification
- 43. Decoy system used to attract attackers
- 46. Isolated environment used to test suspicious files
- 47. Secure connection that encrypts internet traffic
- 49. Person who gains unauthorized access to systems