Active Content- program code embedded in the contents of a web page. When the page is accessed by a web browser, the embedded code is automatically downloaded and executed on the user’s workstation. The code provides interaction or dynamic changes and contains such "action items" as animated GIFs, Java, JavaScript, streaming audio and video or ActiveX controls.
ActiveX Control- can be automatically downloaded and executed by a Web browser. ActiveX is not a programming language, but rather a set of rules for how applications should share information. It enables a program to add functionality by calling ready-made components that blend in and appear as normal parts of the program. They are typically used to add user interface functions, such as 3D toolbars, a notepad, calculator or even a spreadsheet. ActiveX controls or active content are not always dangerous, but they are common tools for attackers. Microsoft has developed a registration system so that browsers can identify and authenticate an ActiveX control before downloading it. The default configuration in most Web browsers is to prompt the user if an ActiveX control is being requested so the user can decide to download it or not. Take the precaution of disabling active content from websites that you’re not familiar with or do not trust.
Application- A set of files (e.g., executables, configuration files, ancillary data files) that make up software which can apply directly in the performance of tasks that benefit the user. Typical examples include desktops, word processors, spreadsheets, and media players.
Authentication- The process of confirming the correctness of the claimed identity.
Backdoor- A tool installed after a compromise to give an attacker easier access to the compromised system around any security mechanisms that are in place.
Boot up- to start a computer.
Cookie- A small data file exchanged between a web server and a web browser which contains information used to identify users and possibly prepare customized web pages for them.
Commercial Software- Software that is designed and developed for sale to the general public.
Computer Security- The concept of attaining a secure computing environment (i.e., an ideal state free from risk or danger) by mitigating the vulnerabilities associated with computer use.
Computing Resources- include computers, hardware, software, computer accounts, computing facilities, and the network environment.
Confidential- The classification of data which should not be disclosed to unauthorized persons, processes, or devices.
Content- This refers to the various types of data that can be displayed by a computer, such as text, images, audio, and video. Content should be contrasted with software, which is a set of computer programs used to make the content available to the user.
Copyright- The legal right granted to an author, composer, playwright, publisher, or distributor to copy, adapt, distribute, rent, publicly perform, and publicly display their works of authorship, such as literary works, databases, musical works, sound recordings, photographs, and other still images, and motion pictures and other audiovisual works. All copyrighted works (including software) are protected as soon as they are committed to a medium.
Cryptography- The science of transforming data so that it is interpretable only by the intended recipient(s)/authorized persons.
Data- Any form of information whether on paper or in electronic form. Data includes all files, regardless of size or storage media, including text, images, audio, video, and software. Everything read and written by the computer can be considered data except for instructions in a program that are executed.
Defacement- The method of modifying the content of a website in such a way that it becomes vandalized” or embarrassing to the website owner.
Denial of Service (DoS)- A condition in which a system can no longer respond to normal requests (e.g., inability to login to an account or access a service), or operations and functions are delayed.
Digital Content- refers to any information that is published or distributed in a digital form, including text, data, sound recordings, photographs and images, motion pictures, and software.
Distribution-in terms of copyright law, this refers to the exclusive right of the copyright holder to sell, trade, rent, lease, lend, or otherwise transfer material from one entity to another.
Domain name- A component of URLs (i.e., web addresses) that helps identify their respective web pages.
The following examples illustrate the difference between a URL (Uniform Resource Locator) and a domain name:
URL: http://www.example.com/
Server name: www.example.com
Domain name: example.com
Subdomain: www
Domain: example
Top level domain: com
Download- to receive a file over the Internet from another computer.
Dumpster Diving- Act of rummaging through discarded material to find confidential, sensitive, or otherwise unavailable information.
Educational record- Any record directly related to a student, including grades, Social Security number, addresses, telephone numbers, etc., that is maintained by an institution or by an agent acting directly for the institution.
Encryption- The cryptographic transformation of data (plaintext) into a form (ciphertext) that conceals the data’s original meaning to prevent it from being known or used.
File sharing-Directly or indirectly transferring files from one computer to another over the Internet and smaller networks, usually following the peer-to-peer (P2P) model. Those who engage in file sharing are downloading files that other users share.
Flooding- An attack that attempts to cause a failure in a computer system or other data processing entity by providing more input than the entity can process properly.
Freeware- Computer software that is distributed in a way that allows individuals and non-profit organizations to use the software at no charge. The software usually comes with a license agreement that prohibits the software from being sold, rented, or otherwise distributed in a for-profit manner.
Hacking- Use of programming skills to subvert computer security and gain unauthorized access to networks, systems, or files for malicious purposes (e.g., fraud, theft, vandalism, and fraud).
Hard drive- A computer’s primary storage device, which reads and writes data on a hard disk.
Hardware- The physical or mechanical devices that comprise a computer system, such as the central processing unit (CPU), modem, monitor, keyboard, and mouse, as well as other equipment like disks, printers, speakers, and cables.
Health/Medical record- A compilation of medical data relating to a patient. It may include demographics, medical/surgical/family/social history, physician’s notes, recordings and observations from physical exams, test/lab results, etc.
Identity theft- A crime in which an imposter obtains key pieces of someone’s personal information (i.e., name, Social Security number, driver's license number, bank account information, credit card numbers, signature, or passwords) and uses it for his/her own personal gain.
Information- That which is extracted from a compilation of data in response to a specific need. Information is the summarization (or collection) of data which may be transmitted, manipulated, and stored by an information system. Technically, data are raw facts and figures that are processed into information.
Information Security- Measures, procedures, or controls that protect information, in any medium (electronic, print, audio, visual, etc.), from unauthorized access (accidental or intentional), modification, disclosure, or destruction.
Information Technology (IT)- The scientific, technological, and engineering disciplines and the management technologies used in information handling, communication, and processing; the fields of electronic data processing, telecommunications, networks, and their convergence in systems; applications and associated software and equipment together with their interaction with humans and machines.
Infringement-This concept arises in patent, copyright, or trademark law. When someone copies software without permission of the copyright or patent owner, or uses a trademark without the permission of the trademark owner, he/she has committed an act of infringement, that is, he/she has infringed on the rights of the copyright, patent, and/or trademark owner.
Integrity- The assurance that information has been created, amended, or deleted only by the intended authorized means. For example the information can be 'trusted'.
Internet Piracy- Unlawfully transmitting software or other copyrighted material; or providing infringing material that enables users to violate copyright protection mechanisms in software over the Internet.
Intellectual property- The legal rights of ownership (i.e., entitlement) attached to expressed forms of intellectual creations. For example: inventions, programs, software, data, formulas, applications, logos, designs, patents, copyrights, trademarks, etc.
IT Security- Technological discipline concerned with ensuring that IT systems perform as expected and do nothing more; that information is adequately protected for confidentiality; that system, data, and software integrity is maintained; and that information and system resources are protected against unplanned disruptions of processing that could seriously impact mission accomplishment.
ITIM- Office of Information Technology Issues Management of Computing and Information Services.
Legitimate Educational Interest- is any authorized interest or activity undertaken in the name of the university for which access to educational record is necessary or appropriate to the proper performance of the undertaking. This also determines whether or not a staff or faculty member is violating FERPA when he/she accesses a student’s record.
License- A contract in which a party with proper authority (the “licensor”) grants permission for another party (the “licensee”) to do something that would otherwise be prohibited.
Malware- A generic term for a number of different types of malicious code.
Malicious Program- Any program or piece of code designed to do damage to a system or the information it contains, or to prevent the system from being used in its normal manner.
Media- The plural form of “medium,” which is materials that can store data or allow data to pass through them. Examples: flash/jump drives, CD/RWs, DVDs, videotapes, hard drives, paper, etc.
Medical/Health record- A compilation of medical data relating to a patient. It may include demographics, medical/surgical/family/social history, physician’s notes, recordings and observations from physical exams, test/lab results, etc.
Multimedia- Includes the use of text, audio, graphics, animation and full-motion video. Multimedia programs are typically games, encyclopedias and training courses on CD-ROM or DVD. However, any application with sound and/or video can be called a multimedia program.
Notice- the legal concept describing a requirement that a party be aware of the legal process affecting their rights, obligations, or duties.
Operating System- The master control program that is designed to control the hardware of a specific data-processing system (i.e., computer) in order to allow users and application programs to make use of it.
Open Access Lab- University Open-Access Computer Labs (OALs) are available for faculty and students of the University. Five Open-Access Labs, six supported locations, and one dedicated Printing Center provide access to email accounts as well as Web navigation, image-manipulation, DeskTop Publishing, spreadsheet applications, computer - to - computer communications software, programming languages, and a number of course-specific programs. Lab access is twenty-four hours per day when classes are in session in the Student Computing Center (SCC) in order to better serve the needs of the students and faculty. http://oalinfo.tamu.edu/
Password- A protected string of characters which serves as authentication of a person’s identity, which may be used to grant or deny access to private or shared data.
Patch- A small update released by a software manufacturer to fix bugs in existing programs.
Peer-to-Peer (P2P)- P2P applications use networks to connect to other P2P applications in order to swap music, movies, games, images, and other types of files.
Personal Information- Information about an individual whose identity is apparent, or can reasonably be ascertained from his/her information. This includes such items as: name; Social Security number; address; telephone numbers; age or date of birth; medical records; distinctive physical characteristics, such as eye and hair color, height, weight; employment information; relationship details; political or religious details; disabilities etc.
Phishing- The attempt to fraudulently acquire sensitive information (e.g., passwords, account numbers, or financial information) by masquerading as a trustworthy person or business in a seemingly official communication.
Portable Computing Devices- Mobile computing devices that can store, organize, and access information, and possibly connect to the Internet. Examples: laptop, PDA (Personal Digital Assistant), palm pilot, handheld computers, etc.
Program- A computer program (computer application) is a sequence of instructions or actions that are interpreted and executed by the computer. The term program or computer program is used interchangeably with software and software application.
Public Domain- the status of publications, products, and processes that are not protected under patent or copyright. Public domain software comes into being when the original copyright holder explicitly relinquishes all rights to the software. Since under current copyright law, all copyrighted works (including software) are protected as soon as they are committed to a medium, for something to be a public domain it must be clearly marked as such.
Public Information- Information, facts and knowledge provided or learned as a result of research or study, available to be disseminated to the public.
Sensitive Information- Information that must be protected because it might cause perceivable damage to someone or something if revealed to persons not entitled to it. This includes personal and confidential information.
Shoulder surfing- using direct observation techniques, such as looking over someone's shoulder, to get information.
Software- the programs (instructions), routines, and symbolic languages that control the system’s hardware and direct its operations (functions).
Software Piracy - the unauthorized use, reproduction, distribution, or transmission of copyrighted material.
Spam- Any unsolicited, unwanted, irrelevant, or inappropriate messages, especially commercial advertising in mass quantities (e.g., electronic "junk mail" or pop-up ads).
Spoofing- Impersonating, masquerading, or mimicking another person, computer, or organization via email (e.g., providing a false email name/address), web pages (e.g., forging the URL, IP address, or the “look and feel” of the web page), or file sharing services (e.g., sharing/distributing counterfeited software) in order to obtain sensitive information, gain access to a system or data in it, gain illegal entry to services/accounts, or otherwise deceive people.
Student- any person admitted to the university, pursuing undergraduate, graduate or professional studies, whether full-time or part-time, and who is currently enrolled or was enrolled the previous semester and registered for a future semester.
System- A term that refers to a “computer system,” which is made up of the CPU, operating system and peripheral devices. All desktop computers, laptop computers, network servers, minicomputers and mainframes are computer systems. Most references to "computer" imply the "computer system."
Trademark- An exclusive identifier of the commercial source or origin of products or services; it comprises a name, word, phrase, logo, symbol, design, image, or a combination of one or more of these elements.
Trojan- A computer program, usually installed on a computer without the owners knowledge, that allows another person elsewhere on the Internet to make use of the system by installing a back door.
University or "institution" means Texas A&M University.
University officials are:
Faculty & staff with a legitimate educational interest in a student's record.
Agencies or orgs from which the student has received financial aid.
Officials from other educational institutions in which the student is seeking to enroll.
Students serving on official University committees or assisting eligible faculty and staff (teaching assistants, student workers, etc.).
upload- to send a file over the Internet to another computer.
Via- by way of; by means of.
Virus- an unwanted computer program or other set of instructions inserted into a computer's memory, operating system, or program that is specifically constructed with the ability to replicate itself or to affect the other programs or files in the computer by attaching a copy of the unwanted program or other set of instructions to one or more computer programs or files.
Warez- the name is a derivative of the plural form of the word “software” meaning copyrighted material traded in violation of its copyright license. The term generally refers to pirated software distribution by organized groups, as opposed to peer-to-peer file sharing between friends. Through the users of these sites the warez is delivered to people outside groups where it starts spreading through peer-to-peer networks, like Bit Torrent or KaZaA, and becomes available to the public.
Worm- A program or algorithm capable of replicating itself and spreading from one computer to the next over a computer network. It usually performs malicious actions, such as using up the computer's resources and possibly shutting the system down.