Flashcards for:
Protecting Data

Data obfuscation is a technique that makes understandable data difficult to interpret, used primarily to protect code bases and hide malicious scripts from analysis.

A decryption key is essential in encryption because it allows the restoration of the encrypted data (ciphertext) back to its original form (plaintext), maintaining data confidentiality.

Tokenization replaces sensitive data with non-exploitable tokens, which are used one-time in transactions, thus minimizing risk if they are intercepted.

On mobile devices, determining accurate user location with IP addresses and subnets can be challenging due to dynamic network environments and mobility.

'Confusion' in encryption refers to the principle of making extensive changes from the original plaintext data to ciphertext to secure its confidentiality.

Data masking is often used in displaying credit card numbers on receipts, where only the last four digits are shown to protect sensitive information.

Geofencing enhances data protection by restricting data access based on a user’s physical location, ensuring that data can only be accessed in specified areas such as corporate facilities.

Data protection is crucial for business continuity because data is stored in multiple locations (storage drives, networks, CPUs, memory), and ensuring its security helps prevent business disruptions.

Permission restrictions assign specific rights and access permissions to user accounts, incorporating authentication checks and limiting access to sensitive data and functionalities.

Data segmentation divides data into smaller, more secure databases, allowing implementation of different security levels and minimizing damage in the event of a breach.

Hashing transforms data into a fixed-size string that cannot be converted back to its original form, unlike encryption, which allows data decryption back to its original form with a key.

Geographic restrictions are policy decisions based on the location of data and the user, determined through IP addresses, subnets, and geolocation technologies like GPS and 802.11 wireless databases.

The SHA-256 algorithm is used to generate unique and fixed-length hashes for input data, ensuring secure password storage and file integrity by avoiding hash collisions.

Data segmentation allows organizations to enforce varying security levels for different data types, optimizing protection strategies and limiting the scope of potential security breaches.

GPS provides precise location details, while 802.11 wireless databases can determine location through SSIDs, offering reliable means for implementing geographic restrictions.