信息安全术语培训资料

信息安全术语理员删除 信息安全技术术语(中英文)Implementsecurityconfigurationparametersonnetworkdevicesandothertechnologies和其他设备上实施安全配置参数Firewalls防火墙outerschesLoadBalancers均衡Proxies理bNIDSandNIPS网络入侵检测与网络入侵防范BehaviorbasedSignaturebasedAnomalybasedHeuristic式Protocolanalyzers议分析仪mfilterUTMsecurityappliances统一威胁管理*Contentinspection内容检查Malwareinspection件检查墙Applicationawaredevices应用端设备*Firewalls防火墙SSoxies1.2Givenascenario,usesecurenetworkadministrationprinciples.应用安全网络管理原则Rulebasedmanagement则的管理Firewallrules防火墙规则SecurerouterconfigurationAccesscontrollists访问控制列表PortSecurity安全802.1x802.1xFloodguards攻击防护oopprotection Networkseparation网络隔离Loganalysis日志分析nifiedThreatManagementttingVLAN拟局域网NAT网络地址翻译moteAccessTelephony电话Virtualization虚拟化CloudComputing计算PlatformasaService服务SoftwareasaService即服务InfrastructureasaService施即服务ivatePublic有云ybridCommunityLayeredsecurityDefenseindepth安全/深度防御rioimplementcommonprotocolsandservices的协议和服务Protocols协议ecCMPIPvIPvCSIChannel ingndOperationalSecuritypts typesicalagementionalFalsepositives误报Falsenegatives报skPrivacypolicyableuseritypolicydatoryvacationstationrationofdutieslegelculationlihoodpactQuantitativevs.qualitative定量vs.定性Vulnerabilities漏洞hreatvectorsProbabilitythreatlikelihoodoffboardingbusinesspartnersrksandorapplicationstyagreementsyconsiderations理员删除 arenessuthorizeddatasharingownershiptabackupssecuritypolicyandprocedures2.3Givenascenario,implementappropriateriskmitigationstrategies.，实施正确的风险降低策略ChangemanagementUserrightsandpermissionsreviews用户权限审核Performroutineaudits执行日常审计Enforcepoliciesandprocedurestopreventdatalossortheft和程序来阻止数据的损失或失窃Enforcetechnologycontrols技术控制*DataLossPrevention(DLP)数据防泄漏(DLP)2.4Givenascenario,implementbasicforensicprocedures.实施基本的取证程序Orderofvolatility序Capturesystemimage系统镜像Networktrafficandlogs网络流量与日志Capturevideo录像Recordtimeoffset间偏离Takehashes校验hotsWitnesses目击者Trackmanhoursandexpense跟踪记录人员时间和花费nofcustodyBigDataanalysis大数据分析2.5Summarizecommonincidentresponseprocedures.Preparation准备Escalationandnotification知Mitigationsteps缓解步骤onslearnedeportingRecoveryreconstitutionprocedures序Firstresponder第一响应人理员删除 Quarantine离区ceremovaltabreachageandlosscontroliningandprocedurestrainingallyidentifiableinformation*High高*Medium中Low低fidential*Private隐私PublicnghandlinganddisposalserhabitsordbehaviorsandlingskpoliciesPreventtailgatingyowneddevicesNewthreatsandnewsecuritytrends/alerts新威胁与新安全趋势/警告irusesingattacksdayexploitsosturementalcontrolsFiresuppression灭火ngandcoldaisles理员删除 onmentalmonitoringreandhumiditycontrolssicalsecuritydwarelocks*Mantraps陷门(双重门)urveillanceFencing笆ityreadersistrlightingigns*Guards门卫rricadesrics*Protecteddistribution(cabling)分发保护(线缆)msctiontypesentreventivetectivempensatingechnicalAdministrative性2.8Summarizeriskmanagementbestpractices.Businesscontinuityconcepts业务连续性概念Businessimpactanalysis响分析*IdentificationofcriticalsystemsandcomponentsRemovingsinglepointsoffailure消除单点故障Businesscontinuityplanningandtesting业务连续性规划与测试Riskassessment估Continuityofoperations续性Disasterrecovery恢复TccessionplanninghavailabilityRedundancy余letopexercisesFaulttolerance容错ardware usteringadbalancingrssasterrecoveryconceptsackupplanspoliciesackupexecutionfrequencyColdsiteHotsite热站Warmsiteentialitycryptioncontrolshy*Hashing哈希alsignaturesrtificatesationAvailability可用性RedundancyFaulttolerance容错ncingighting*Locks门禁CCTV电视eplansrillsEscaperoutesTestingcontrols Firewalls防火墙rsdBalancersroxiesdNIPSiorbasedturebasedybasedristicocolanalyzersTMsecurityappliancesContentinspection内容检查nspectionlWeb墙Applicationawaredevices设备Firewalls火墙xiesmanagementrewallrulesrconfigurationAccesscontrollistsSecurityardstectionyNetworkseparation网络隔离Loganalysis日志分析nifiedThreatManagement ttingVLAN拟局域网NAT网络地址翻译moteAccessTelephony电话Virtualization虚拟化CloudComputing计算PlatformasaService服务SoftwareasaService即服务InfrastructureasaService施即服务ivatePublic有云ybridCommunityLayeredsecurityDefenseindepth安全/深度防御rioimplementcommonprotocolsandservices的协议和服务Protocols协议ecCMPIPvIPvCSIChannel ingndOperationalSecurityptstypesicalagementional Falsepositives误报Falsenegatives报skPrivacypolicyableuseritypolicydatoryvacationstationrationofdutieslegelculationlihoodpactQuantitativevs.qualitative定量vs.定性Vulnerabilities漏洞hreatvectorsProbabilitythreatlikelihoodoffboardingbusinesspartnersrksandorapplicationstyagreementsyconsiderationsesshorizeddatasharingershipckups理员删除 securitypolicyandprocedures2.3Givenascenario,implementappropriateriskmitigationstrategies.，实施正确的风险降低策略ChangemanagementUserrightsandpermissionsreviews用户权限审核Performroutineaudits执行日常审计Enforcepoliciesandprocedurestopreventdatalossortheft和程序来阻止数据的损失或失窃Enforcetechnologycontrols技术控制*DataLossPrevention(DLP)数据防泄漏(DLP)2.4Givenascenario,implementbasicforensicprocedures.实施基本的取证程序Orderofvolatility序Capturesystemimage系统镜像Networktrafficandlogs网络流量与日志Capturevideo录像Recordtimeoffset间偏离Takehashes校验hotsWitnesses目击者Trackmanhoursandexpense跟踪记录人员时间和花费nofcustodyBigDataanalysis大数据分析2.5Summarizecommonincidentresponseprocedures.rationEscalationandnotification知Mitigationsteps缓解步骤onslearnedeportingRecoveryreconstitutionprocedures序FirstrespondertineiceremovalDatabreach理员删除 ageandlosscontroliningandprocedurestrainingallyidentifiableinformation*High高*Medium中Low低fidential*Private隐私PublicnghandlinganddisposalserhabitsordbehaviorsandlingskpoliciesPreventtailgatingyowneddevicesNewthreatsandnewsecuritytrends/alerts新威胁与新安全趋势/警告irusesingattacksdayexploitsosturementalcontrolsFiresuppression灭火ngandcoldaislesentalmonitoringreandhumiditycontrolsalsecuritydwarelocks理员删除