The scientific collection, examination, authentication, preservation, and analysis of data held on or retrieved from computer storage media in such a way that the information can be used as evidence in a court of law

Determines the level of risk to the firm if a specific activity or process is not properly controlled

Feature full-time monitoring tools placed at the most vulnerable points or "hot spots" of corporate networks to detect and deter intruders continually

A group of computers that have been infected with bot malware without users' knowledge, enabling a hacker to use the amassed resources of the computers to launch distributed denial-of-service attacks, phishing campaigns, or spam

Individual who intends to gain unauthorized access to a computer system

Increases security by validating users with a multi-step process

Setting up fake Web sites or sending email message that look like those of legitimate business to ask users for confidential personal data

Law outlining rules for medical security, privacy, and the management of health care records

The ability to know that a person is who he or she claims to be

Malware that comes with a downloaded file that a user intentionally or unintentionally requests

Transactions entered online are immediately processed by the computer → online transaction processing

Small programs that install themselves surreptitiously on computers to monitor user Web surfing activity and serve up advertising → spyware

Eavesdropping program that monitors information traveling over a network → sniffer

Passwords → intentional disruption, defacement, or even destruction of a Web site or corporate information system

Cybervandalism → known only to authorized users

Denial-of-service (DoS) attack → hackers attempting to hide their true identities "spoof" or misrepresent themselves by using fake email addresses or masquerading as someone else

Computer crime → any violations of criminal law that involve a knowledge of computer technology for their perpetration, investigation, or prosecution

Security → refers to the policies, procedures, and technical measures used to prevent unauthorized access, alteration, theft, or physical damage to information systems

Malicious intruders seeking system access sometimes trick employees into revealing their passwords by pretending to be legit members of the company in need of information → spyware

Process of transforming plain text or data into cipher text that cannot be read by anyone other than the sender and the intended receiver → encryption