Study Guidelines for the Second Midterm

1) Read the assigned chapters from the text (Chapters 1-19).

2) Read the class notes and your personal ones.

3) Again, please be able to identify current terminology (in addition to the links below, I also suggest looking at the articles on the class home page):

• APT → advanced persistent threat
• backdoor
• blockchain
• CERT → CERT/CC, US-CERT
• COTS → commercial off-the-shelf
• cryptocurrency
• CVE → common vulnerabilities and exposures
• DOS/DDOS → denial of service
• IoT → Internet of Things
• keylogger
• NIST → National Institute of Standards and Technology
• PII → personally identifiable information, NIST paper
• ransomware
• phishing/spear-phishing/whaling
• stingray
• TAO → NSA's Tailored Access Operations unit
• TPM → trusted platform module
• trojan
• TOR → the onion router
• zero-day exploit (often just "zero-day")