Cyber Crime Glossary

A

Access Point

A wireless access point (WAP or AP) is a device that "connects" wireless communication devices together to create a wireless network. The WAP is usually connected to a wired network, and can relay data between devices on each side.

Address

An internet address or IP (internet protocol) address is a unique computer (host) location on the internet.

ADSL

Asymmetric Digital Subscriber Line. In Europe, ADSL is seen as a major means to deliver broadband information, communications, and entertainment services to the consumer and business markets. It is a prime high-speed alternative to cable modems for replacing dial-up access that can often be frustratingly slow. It is faster than ISDN.

APNIC

The Asia-Pacific Network Information Centre is the Regional Internet Registry for the Asia-Pacific region. IP address registration information can be queried at http://whois.apnic.net/, which may contain records originating from APNIC itself, or from national registries such as TWNIC (Taiwan), KRNIC (Korea), or JPNIC (Japan).

Application

A self-contained program that performs a well-defined set of tasks under user control, as opposed to a system program (for example, web browsers, mail readers, and FTP clients are applications commonly used on the internet)

Archive

An archive is a collection of computer files that have been packaged together for backup, to transport to some other location, for saving away from the computer so that more hard disk storage can be made available, or for some other purpose. On PCs with the Windows operating system, WinZip for example is a popular program that lets you create an archive or extract its files (archive file name suffix ".zip"). WinZip also compresses the files that are archived.

ARP

In computer networking using the internet protocol suite, the Address Resolution Protocol is a method for finding a host's Ethernet (MAC) address from its IP address. The sender broadcasts an ARP packet containing the Internet address of another host and waits for it (or some other host) to send back its Ethernet address.

ASCII

American Standard Code for Information Interchange is a character set and a character encoding based on the Roman alphabet as used in modern English. ASCII codes represent text in computers, in other communications equipment, and in control devices that work with text.  There are 95 printable ASCII characters, numbered 32 to 126.

Attachment

A file that is embedded into an email message, and which requires a separate action to open (and which may also contain harmful code)

Authentication

A process of verifying the identity of a person or the identity of an entity (e.g. an individual).

B

Backbone

Main net, connecting lesser subordinate nets.

Backdoor

An undocumented method of bypassing normal authentication or securing remote access to a computer.

Backup

A copy taken of all information held on a computer in case something goes wrong with the original version.

Bandwidth

The amount of information or data that can be sent over a network connection in a given period of time, usually stated in bits per second (bps), kilobits per second (kbps), or megabits per second (mps).

Binary System

The binary numeral system represents numeric values using two symbols, typically 0 and 1. Binary is a positional notation with a radix of two, e.g. 1 decimal is 00000001, 2 decimal is 00000010 and 255 is 1111111.

BIOS

Basic Input Output System. A set of routines stored in read-only memory that enables a computer to start the operating system and to communicate with the various devices in the system such as disk drives, keyboard, monitor, printer and communication ports. It is software that is executed by the computer directly after it had been switched on. It is available for the CPU and boots the operating system.

Bit

A bit or Binary Digit (sometimes abbreviated b) is the most basic information unit used in computing and information theory. A single bit is a one or a zero, a true or a false, a "flag" which is "on" or "off", or in general, the quantity of information required to distinguish two mutually exclusive states from each other.

Bluetooth

A telecommunications industry specification that describes how mobile phones, computers, and PDAs can easily interconnect with each other and with home and business phones and computers using a short-range wireless connection. Bluetooth requires that a low-cost transceiver chip be included in each device.

Boot

To start a computer, more frequently used when referring to the operating system that controls the computer.

Bot

An individual computer infected with malware – which is then turned into a zombie.

Botnet

A collection of bots, which run autonomously and which the botnet's originator (the ‘botmaster’) can control remotely, usually through a means such as internet relay channel (IRC), and usually for nefarious purposes such as distributed denial of service attacks (DDoS)

Browser

A program that allows a user to access files from any computer connected to the Internet. Well known graphical interface browsers include Mosaic, Netscape and Microsoft's Internet Explorer.

Brute Force Attack

A tedious problem-solving technique which systematically enumerates all possible candidates for the solution and checking whether each candidate satisfies the problem's statement. For example, in a brute force attack, one defeats an encryption program by exhaustively working through all possible keys in order to decrypt a message.

Buffer

An area of memory often referred to as the cache used to speed up access to devices. It is often used for temporary storage of data read from or waiting to be sent to a device such as a hard disk, CD rom, printer or tape drive.

Byte

A byte is commonly used as a unit of storage measurement in computers. 1 Byte contains 8 Bits.

C

Cache

A temporary memory area set aside to store information, which is most frequently accessed in a computer. It is used to enable the computer to operate at a higher speed.

CERT

Computer Emergency Response Teams are organisations throughout the world that deal with computer security, provide help in computer security matters and warn of new security gaps.

Certificate Authority

A body that generates, signs and issues Public Key Certificates which bind Subscribers to their Public Key

Chat

A form of interactive online communication that enables typed conversations to occur in real-time, with messages are instantaneously relayed to other members in the chat room

Chat Room

Available through online services and some electronic bulletin boards, allowing the real-time exchange of messages between users of a particular system (may be open or secure chat rooms)

Check sum

A mathematical calculation applied to the contents of a packet before and after being sent (indicating errors in the transmission if the "before" and "after" calculation does not match)

Cookie

A program used to measure users' behaviour and habits on Internet. Cookies are stored on the user's hard disk and are used to identify the user. It is "stamped" each time the user and server are connected.

Compromise

A violation (or suspected violation) of a system such that unauthorised disclosure of sensitive information may have occurred

CPU

The Central Processing Unit is the computational and control unit of a computer. Located inside a computer, it is the "brain" that performs all arithmetic, logic, and control functions in a computer. One of the main tasks is writing and reading of data out of the working storage.

Cracker

A person who gains unauthorised access to a computer usually with the intention of manipulating or damaging data. A cracker also designates specialised software used for such an intrusion (e.g. password cracker). See also "hacker".

Cryptography

A science of encrypting the information to make it secret (privacy), to protect its integrity and/or to provide other security mechanisms.

Cyber Stalking

The use of computers or associated technologies to stalk or harass a person.

D

Data Base

Structured collection of data that can be accessed for uses including address links, invoicing information, statistical records etc.

Date and Time Stamps

A piece of data that enables the identification of the existence of a digital content at the particular date and time.

Deleted Files

Files sent to a PC’s recycle bin, with the consequent removal of the file’s root directory link (note, however, that depending on how the files are deleted, in many instances a forensic examiner is able to recover all or part of the original data).

Denial of Service Attack (DoS)

An attack aimed at specific websites by flooding the webserver with repeated messages, tying up the system and denying access to legitimate.

Dictionary Attack

A technique used to defeat an encryption or authentication mechanism by trying to determine its decryption key, password or passphrase by searching through predefined databases or dictionaries – see also brute force attack.

Digital Certificate

An electronic document signed by the Certification Authority which identifies a Key Holder and the business entity he or she represents, binds the Key Holder to a Key Pair by specifying the Public Key of that Key Pair, and contains the information required by the Certificate Profile

Digital Signature

A digital value that lets the receiver verify the sender's identity and know that the message was not changed en route.

Directory

An entity in a file system which is used to organise files and/or files into a hierarchical structure.

Disk Partition

In PCs, a partition is a logical division of a hard disk created so that you can have different operating systems on the same hard disk or to create the appearance of having separate hard drives for file management, multiple users, or other purposes. A partition is created when you format the hard disk.

Distributed Denial of Service Attack (DDoS)

A denial of service attack using multiple sources of messages, usually from a large number of computers connected to the internet.

DNS

Domain Name System. A tree-like hierarchy comprising a root domain, top level domains, domains and subdomains.

DNS-spoofing

The use of a Domain Name Server with a fictitious cover to gain access to a computer.

Dongle

A small external hardware device that plugs into a computer port and that usually contains types of information similar to information on a smart card.

DSL

Digital Subscriber Line is a set of protocols designed to allow high-speed data communication over the existing telephone lines between end-users and telephone companies.

Dynamic IP Address

Dynamic IP address is issued to identify non-permanent devices that takes place at the moment when needed rather than in advance.

E

Electronic Evidence

Electronic evidence is information and data of investigative value that is stored on or transmitted by an electronic device or by digital storage media, sometimes referred to as the digital evidence or the computer based evidence.

Email

Electronic mail. A fast and efficient way of communicating allowing the user to send, receive, forward, answer or delete electronic messages. Text and graphic files can also be attached to the messages.

Email Header

E-mails come in two parts: the body and the header.  Normal header information gives the recipient details of time, date, sender and subject. All e-mails also come with extended headers – information that is added by e-mail programs and transmitting devices – that show more information about the sender so that the message is in general traceable to a particular computer on the Internet.

EnCase

Commercially available forensic software product, produced by Guidance Software.

Encryption

Method of scrambling and encoding data. Used to convert plain text into ciphertext (by using a mathematical parameter called cryptographic key) in order to prevent anyone but the intended recipient from reading that data.

F

File Compression

A technology that reduces the size of a file, saving both time and bandwidth in transmission.

File Extension

Part of the name of a file that determines its type and function: examples include .doc, .exe and .bat.

File Sharing Program

Computer codings that enable electronic transfer of files from one computer to another over the internet, over a smaller Intranet, or across simple networks.

File System

The way in which files are named and where they are placed logically for storage and retrieval in a computer.  The DOS, Windows, OS/2, Macintosh, and UNIX-based operating systems all have file systems in which files are placed somewhere in a hierarchical (tree) structure.  A file is placed in a directory (folder in Windows) or subdirectory at the desired place in the tree structure

Filtering

Internet filtering systems prevent or block user’s access to unsuitable material.

Firewall

A set of related programs, located at a network gateway server (i.e., at a network point that acts as an entrance to another network), that protects the resources of a private network from users from other networks.  It can be hardware as well as software through which incoming and outgoing data must pass for verification and authentication. If the security procedures are not satisfied, the unauthorised access will be denied. A firewall can be used to protect certain (classified) areas of a network.

Flash Memory

Flash memory (sometimes called "flash RAM") is a type of constantly-powered non-volatile memory that can be erased and reprogrammed.

Free Space

Can contain clusters that are not currently used by the operating system but contain “deleted” files or data.

FTP

File Transfer Protocol, a standard Internet protocol, is the simplest way to exchange files between computers on the Internet.

G

Gateway

A gateway connects two or more nets with different LAN protocols and allows the data-transfer from one to the other.

GPS

The Global Positioning System is a satellite-supported worldwide tracking. The GPS is a "constellation" of satellites that orbit the Earth and make it possible for people with ground receivers to pinpoint their geographic location.

H

Hacker

A person with good knowledge of computers, networking and communications and who gains or tries to gain access to closed or protected computer systems by outwitting security measures. Hackers sometimes publicise their findings.

Hard Drive

A sealed box containing rigid platters (hard disks) coated with a substance capable of storing data magnetically. It can be encountered in the case of a PC as well as externally in a standalone case.

Hash

A mathematical algorithm that creates a small digital "fingerprint" from any kind of data.

Hidden File

A file not seen in the normal directory listing or found with a standard search operation. Under some operating systems the users are free to determine whether a file they created should have the property "hidden". In addition, any computer or PC keeps or logs all of the users' activity in hidden, invisible places.

HTML

Hypertext Markup Language is a document format that marks hypertext in the World Wide Web and the Internet.  This universal code is used to instruct a web browser how a document is to be managed and displayed and where the hyperlinks will be made.

HTTP

Hypertext Transfer Protocol. The Web’s file transfer protocol that enables files to be sent and received across the Internet. It allows links to other web sites to be embedded in a web page. When one clicks on such a link, the web browser goes automatically to that link without the user always knowing where the different file servers are being accessed.

Hub

A place of convergence in a network where data arrive from one or more directions and are forwarded to one or more other directions. It usually works as a multiport repeater by generating a number of identical outputs from a single input.

I

ICANN

The Internet Corporation for Assigned Names and Numbers is an authority called into being by the U.S. Government in 1998 to give away and control Internet standards respectively.

ICQ

A tool to find and contact associates in real time through the internet. ICQ ("I seek you") does the searching and alerts the user in real time when the sought person signs on.

IDS

Intrusion detection system (IDS) is designed to detect malicious network traffic and to monitor computer usage that cannot usually be detected by a conventional firewall.

IEEE

The Institute of Electrical and Electronics Engineers is an international non-profit, professional organization for the advancement of technology related to electricity.

Imaging

Creating an exact duplicate of the memory contents of electronic equipment (also called mirroring, although this term is also used for duplicating Web sites).

Infrared

Infrared wireless technology is used for short and medium range communications and control in a variety of applications (e.g., wireless local area networks, links between notebooks and desktop computers, cordless modems, intrusion detectors).

Instant Messaging

A form of electronic communication that is carried out in real-time between two or more people over a network such as the internet.

Internet

The collective electronic network of computers and computer networks which are interconnected throughout the world - started with the ARPAnet

Intranet

A private or corporate network, protected from intruders by a firewall. It can be formed by several LANs operating independently. The Intranet user can access information on other nets for reasons of speed, convenience and/or cooperation.  An Intranet is different from LANs in that it uses Internet standards such as TCP/IP.

IP

Internet Protocol. The message-handling protocols that define how a computer breaks up the data packets and addresses them so that they arrive at their destination without error or loss.

IP Address

Internet protocol address. The unique address of a device.  The IP-address is a series of numbers, not letters. See also Ipv4 and Ipv6.

IPv4

The 4 byte structure (32 Bit) actually used in IP Addresses, i.e. a series of four numbers, ranging between "0" and "255" and separated by dots.

IPv6

A 6 byte structure (128 Bit) being developed for IP Addresses so as to be able to increase the number of devices that can have an IP address.

IRC

Internet Relay Chat. A network service providing a virtual meeting place where people can discuss different issues.  Participants can take part in group discussions on one of the many thousands of IRC channels, or just talk in private.

ISDN

The Integrated Services Digital Network is a high speed digital telephone line for high-speed network communications.  Using telephone lines and computer networks, integrated services can handle video, text, voice, data, graphics etc.

ISP

Internet Service Provider. An organization that provides access to the Internet.

J

Java

An object-oriented programming language developed at Sun Microsystems in the early 1990s.

Jaz

A removable hard disk system. A JAZ drive is a small, portable hard disk drive used primarily for backing up and archiving personal computer files.

K

Keystroke Logger

A  diagnostic computer program that is to capture the user's keystrokes.

L

LAN

Local Area Network. A common name for the networking technologies standardized by the IEEE. It describes a network covering a limited geographical area (e.g. a building or a company) and usually owned by the user’s company or organisation.

Linux

An operating system initially designed to provide users with a free alternative to Unix and Microsoft.  Linux is a favoured tool of experienced hackers as it allows them to control to a very high degree all interaction from their machine to the victim machine. It also allows them to circumvent “security” measures in DOS based systems with relative ease.

Local Host

The local host is the computer one is working on.

Logic Bomb

A computer virus which is triggered off when a predefined set of conditions (usually time and/or date) is fulfilled. When released, it usually results in data damage or unauthorised data manipulation.

Login

The process of gaining access to a computer system by entering the required identification, such as a password

M

MAC Address

In computer networking a Media Access Control address is a unique identifier attached to most forms of networking equipment/hardware.

Macro

A shortcut, such as a symbol, name or key, representing a list of commands, actions, or keystrokes.

Mainframe

An industry term for a large computer, typically manufactured by a large company such as IBM for the commercial applications and other large-scale computing purposes.

Malicious Software (Malware)

Software designed specifically to damage or disrupt a system, such as a virus or a Trojan horse.

MD5 Hash

A mathematical algorithm created in 1991 that is used to create digital signatures of storage media such as a computer hard drive (when the algorithm is applied to a hard drive then it creates a unique value, so that changing the data on the disk in any way will change the MD5 value).

Memory Card

Sometimes called a flash memory card or a storage card.  A small storage medium used to store data such as text, pictures, audio, and video, for use on small, portable or remote computing devices.

Meta Data

Data that is used to describe other data.

Modem

Modulator/Demodulator.  A device used by computers to communicate over telephone lines. It is usually recognised by connection to a phone line, but there are also cable modems based on the DSL technology.

Motherboard

The principal circuit board in a computer that contains the computer’s basic circuitry and components.

N

Network

A group of computers connected to one another to share information and resources. It may be a small local network (Local Area Network) or a big international network such as the Internet.

Newsgroups

A forum for discussion about a particular subject consisting of notes written to a central Internet site and redistributed through Usenet, a worldwide network of news discussion groups.

NTFS

New Technology File System (NTFS) is the standard file system used in Windows NT, Windows 2000, Windows XP, Windows Server 2003 and Windows Vista.

O

Operating System

A software package usually loaded into the computer memory upon switching the computer on. It is a prerequisite for the operation of any other software.

P

Packet

A formatted block of information carried by a computer network.

Packet Filtering

A mean of controlling access to a computer network by analysing the incoming and outgoing packets and letting them pass or halting them based on the IP addresses of the source and destination.

Packet Sniffer

A program / device that monitors data packets travelling over a computer network.

Partition

Dividing a computer’s hard disk into several independent parts or dividing a computer into several independent virtual computers.

PGP

Pretty Good Privacy. Cryptography software originally developed in 1991. Can be used to encrypt/sign emails or encrypt computer files.

Pharming

Seeks to obtain confidential / sensitive information through domain spoofing.

Phishing

Assuming the identity of a legitimate organisation or website using forged email or fraudulent websites to convince others to provide information – usually personal financial, such as credit card numbers, account user names and passwords, social security numbers – for the purpose of using it to commit fraud.

Phreaking

The act of gaining unauthorised access to a telephone system or network.

POP

Post Office Protocol. Standard internet protocol used to retrieve emails from a server holding it (mailbox). There are several versions of the POP protocol but POP 3 is most commonly used.

Pop Up

A form of online advertising and works when certain web sites are opened, a new web browser window displaying the advertisements will be opened.

Port

This term may have two meanings:

- a connector on a device (e.g., parallel port, USB port), or

- a TCP-level address that, together with the IP-level address, uniquely defines a network service (provided by a server).

Protocol

An agreement on the way communication takes place between computers. It defines the various elements in the communication process, for example what functions are to be used and what results are to be expected and how they should be presented.

Proxy Server

A proxy server is a computer that sits between your computer and the rest of the Internet and which stores frequently accessed web pages and graphics.

PKI

Public Key Infrastructure is a setting that allows a trusted third party to vet and vouch for user’s identity which allows binding of users to public keys. The latter is typically embedded in digital certificates.

R

RAM

Random Access Memory. The place in a computer where the operating system, application programs, and data in current use are kept so that they can be quickly reached by the computer’s processor. RAM is much faster to read from and write to than the other kinds of storage in a computer such as the hard disk, floppy disk, or CD-ROM.  However, the data in RAM stays there only as long as the computer is running.

Remote Access

The ability to connect to a network from a distant location, usually requiring a computer, a modem and remote access software to allow the computer to connect to the network over a public communications network.

Removable Media

Small-sized data storage media which are more commonly found in other digital devices such as cameras, PDAs and music players.

Root Kit

Cloaking technologies that are usually employed by other malware programs to abuse compromised systems by hiding files, registry keys and other operating system objects from diagnostic, anti-virus and security programs.

Router

A device or, in some cases, software in a computer, that determines the next network point to which a data packet should be forwarded toward its destination.  The router decides which way to send each data packet based on its current understanding of the state of the networks it is connected to.

S

Script

Various ways of programming the writing of a web page (for example Java).

Server

A dedicated computer that provides services to other computers or the software that runs on it.

Shareware

Software that is distributed free on a trial basis with the understanding that if it is used beyond the trial period, the user will pay. Some shareware versions are programmed with a built-in expiration date.

SIM card

A Subscriber Identity Module card is a special type of smart card suitable for use in mobile phones.

Slack Space

The unused space in a disk cluster. The DOS and Windows file systems use fixed-size clusters. Even if the actual data being stored requires less storage that the cluster size, an entire cluster is reserved for the file. The unused space is called the slack space.

Smart Card

A small handheld device similar to a credit card that contains a microprocessor (chip) that is capable of computing and/or storing a monetary value, encryption key or authentication information (password), digital certificate, or other information.

Software

The pre-written programs designed to assist in the performance of a specific task such as network management, web development, file management, word processing, accounting or inventory management.

SMS/MMS

Short Message Service / Multimedia Message Service is a message formats for mobile phones.

SMTP

Simple Mail Transfer Protocol.  A TCP/IP utility used on the Internet. It allows a basic store and forward mail delivery of text. Standard service for sending and receiving e-mail messages.

Sniffer

A person or utility that allows to "listen-in" to data transfers on the Internet.

Spam

Junk mail (such as commercial advertising, often for dubious products, get-rich-quick schemes, or quasi-legal services) delivered by email or text messages.

Spamming

The act of flooding the internet with many copies of the same message, in an attempt to force the message on people who would not otherwise choose to receive it.

Spoofing

A spoofing attack, in computer security terms, refers to a situation in which one person or program is able to masquerade successfully as another. One kind of spoofing is ‘web page spoofing’, also known as ‘phishing’.

Spyware

Any software that covertly gathers user information through the user's internet connection without his or her knowledge, usually for advertising purposes – spyware applications are typically bundled as a hidden component of freeware or shareware programs that can be downloaded from the internet, which, once installed, monitors user activity on the internet and transmits that information in the background to someone else, and may also gather information about email addresses, passwords and credit card numbers.

SSH

Secure Shell or SSH is a set of standards and an associated network protocol that allows establishing a secure channel between a local and a remote computer.

Steganography

An information hiding technique that usually embeds messages within other, seemingly harmless messages or files.

Subnet

An isolated segment of a larger net (LAN or Intranet).

Switch

A device that channels incoming data from any of multiple input ports to the specific output port that will take the data toward its intended destination.

System Administrator

The individual who has legitimate supervisory rights over a computer system. The administrator maintains the highest access to the system.

T

TCP/IP

Transmission Control Protocol / Internet Protocol. A collection of standards that provides a common language for data transmission. The TCP standards inform the receiving computer what is in the data packet and the IP standard tells the computer where and how to send the packet.

Terminal

A computer terminal is a device, such as a combination of keyboard and display screen, allowing the user to communicate with a computer or computer system.

Trojan Horse

A hidden program in a computer system meant to modify, damage or destroy the contents (data or programs) of the computer system. It is often used by criminal hackers to leave a "back-door" in the system’s protection.

Trojan Horse Defence

A defence argument sometimes raised to put forward an alternative explanation for the presence of illegal content or incriminating data on a computer, relying on the hypothesis of a third party attack by means of malicious code.

U

UPS

Uninterruptible Power Supply. A device that allows an electronic device to keep running for at least a short time when the primary power source is lost.

URL

Uniform Resource Locator. The address of a file accessible on the Internet (e.g. www.esecurity.net.au). This type of file or resource depends on the Internet application protocol (e.g. the World Wide Web’s protocol is usually HTTP).

USB

Universal Serial Bus. A hardware interface/port for lowspeed peripherals such as the keyboard, mouse, joystick, scanner, printer, telephony devices, or access devices/tokens.

V

Virus

A piece of programming code usually disguised as something else that causes some unexpected and usually undesirable event. A virus is often designed so that it is automatically spread to other computer users. Viruses can be transmitted as attachments to an e-mail note, as downloads, or be present on a diskette or CD.

VoIP

Voice over Internet Protocol is a technology that allows users to make telephone calls over the internet instead of the traditional analogue phone line.

W

WAN

Wide Area Network. A network covering a large geographical area or even world-wide. The number of users is virtually unlimited.

War Driving

A technique used to search for Wi-Fi wireless networks using a Wi-Fi-equipped computer in a moving vehicle.

Web Cam

A webcam is a camera connected to the internet that can be used to stream moving images.

Weblog (blog)

A form of online diary or journal, consisting usually of short, frequently updated posts, arranged chronologically with the most recently posted item appearing at the top of the page.

WEP

Wired Equivalent Privacy is a feature used to encrypt and decrypt data signals transmitted between Wireless LAN (WLAN) devices.

Whois

A widely used (domain name lookup) technique to query a domain name database in order to determine the owner of a domain name or an IP address on the internet.

Wireless Access Point

A hub in a wireless LAN.

World Wide Web

The universe of network-accessible information, i.e., all the resources and users on the Internet that are using HTTP.

Worm

Like a virus but is capable of moving from computer to computer over a network without being carried by another program.

Z

Zombie

A computer that has had some of its functions brought under remote control, usually without the owner’s knowledge or consent, by means of a virus or other malicious software. An army of zombies forms a botnet.