CH.10


*Threat- a person or organization that seeks to obtain or alter data.

*Vulnerability- An opportunity for threats.

*safeguard- Measures some organizations take to block the threat from obtaining the asset.

*target- the asset that is desired by the threat.

Human error- mistakes.

*pretexting- someone deceives by pretending to be someone else.

*Phishing- A similar technique for obtaining unauthorized data that uses pretexting via email.

*Phisher- Pretends to be a legitimate company and sends out email requesting confidential data.

*Spoofing- Another term for a person pretending be someone else.

*Sniffing