Study Guidelines for the First Midterm

1) Read the assigned chapters from the text (Chapters 1-15), and take the practice quiz.

2) Read the class notes and your personal ones. Reflect on the in-class exercise on February 2nd, and the other hands-on explorations we have made.

3) Be able to identify current terminology (in addition to the links below, I also suggest looking at the articles on the class home page):

• APT → advanced persistent threat
• backdoor
• blockchain
• CERT → CERT/CC, US-CERT
• COTS → commercial off-the-shelf
• cryptocurrency
• CVE → common vulnerabilities and exposures
• DOS/DDOS → denial of service
• IoT → Internet of Things
• keylogger
• NIST → National Institute of Standards and Technology
• PII → personally identifiable information, NIST paper
• ransomware
• phishing/spear-phishing/whaling
• stingray
• TAO → NSA's Tailored Access Operations unit
• TPM → trusted platform module
• trojan
• TOR → the onion router
• zero-day exploit (often just "zero-day")