third Cyber Security Assessment Netherlands - NCSC

Patch
Phishing
PKI
Relevance
Remote access
Resilience
Rootkit
RFID
SCADA
Securing
Security incident
Sensitive information
SSL certificate
Skimming
Social engineering
SOHO
Spear phishing
A patch (literally a ‘plaster’) may comprise repair software or contain changes that are directly
implemented in a program with the purpose of repairing or improving it.
An umbrella term for digital activities with the object of tricking people into giving up their personal
data. This personal data can be used for criminal activities such as credit card fraud and identity theft.
Spear phishing is a variation that targets an individual or a limited group of individuals in an organisation,
for example, who are selected specifically for their access rights so as to have the biggest possible effect
without being noticed.
A Public Key Infrastructure (PKI) is a collection of organisational and technical resources used to reliably
process a number of operations, such as encrypting and signing information and establishing the identity
of another party.
Indicates the connection between the various threats, threat groups and targets. To determine various
threat levels in CSAN analyses, ‘low’, ‘medium’ and ‘high’ criteria are applied to incidents and threats.
Data processing remotely through a communication connection.
The capacity of individuals, organisations or society to resist negative impacts on the availability and/or
integrity or (information)systems and digital information.
A piece of software that grants an attacker more rights on a computer system and hides its presence from
the operating system.
Radio frequency identification devices (RFID) are small chips that are able to remotely use radio wave
identification to save and/or read out information. RFID tags may be placed on or in objects or living
creatures (cat or dog chips).
See ICS/SCADA.
Protecting against violence, threats, danger or damage by putting measures in place.
A security incident (or information security incident) is one or a series of unwanted or unexpected
incidents that are significantly likely to cause a disaster, compromise business processes, and pose
a threat to security.
Information about critical (vital) infrastructure that could be used, if disclosed, to make plans and commit
offences with the object of disrupting or destroying critical infrastructure systems.
A Secure Socket Layer (SSL) certificate is a file that serves to digitally identify an individual or system.
It also contains PKI keys to encrypt data during transport. A known application of SSL certificates are
HTTPS-secured websites.
The illegitimate copying of data from an electronic payment card such as a cashpoint card or a credit
card. Skimming often involves the theft of pin codes with the final objective of making payments or to
draw money from the victim’s account.
An attack technique that exploits human characteristics such as curiosity, trust and greed with the
objective of obtaining confidential information or to induce the victim to perform a particular action.
Small Office/Home Office (SOHO) refers to use in home systems and small business offices.
See phishing.
109