GLOSSARY Term Definition Dark Web A section of the Internet only accessible through software that allows users to remain anonymous or untraceable. The Dark Web is part of the Deep Web. The Deep Web encompasses web resources that search engines like Google and Yahoo cannot find, such as legitimate but private resources (e.g. e-mail), or public resources behind a paywall or login wall (e.g. paid journal subscriptions). Term Definition Advanced Persistent An attack in which perpetrators successfully gain access to a targeted system, Threat (APT) and stay undetected for a long period of time to exfiltrate, modify, or destroy Attack Surface Data Breach disposal or similar risks of personal data/ information in an organisation's possession or under its control. critical data. APTs can also refer to the advanced, and often state-linked or Denial of Where an attacker attempts to prevent legitimate users from accessing state-sponsored threat actors that conduct extended campaigns, such as Service (DoS) / information or services online. The most common and obvious type of DoS cyber espionage. Distributed DoS (DDoS) attack occurs when an attacker "floods" a network with information. In a distributed DoS attack, an attacker takes unauthorised control of multiple Referring to all vulnerable resources of a system, or the sum of the points computers, which may be harnessed as a botnet, to launch a DoS attack. through which an attacker could try to enter an environment. Bot/Botnet An automated software program used to carry out specific tasks. A botnet is a Hacktivists gain recognition, usually by hacking an organisation's website. a group without the owners' knowledge. A trial-and-error method which involves trying various combinations of usernames and passwords repetitively to gain access into a computer system Industrial Control ICS belong to a class of operational technology (OT) systems used in nearly Systems (ICS) every industrial sector to monitor, control and automate industrial operations and processes. or website. Command and control Centralised devices operated by attackers to maintain communications with (C&C) servers compromised systems (known as botnets) within a target network. Critical Information The computer or computer system necessary for the continuous delivery of an Infrastructure (CII) essential service, which the loss or compromise thereof will have a debilitating Internet of Things (IoT) A form of digital token secured by cryptography and can be used as a medium Keylogging gaining knowledge of passwords. Malware mine cryptocurrency. Cybercrime Refers to cyber-extortion, online cheating cases, and offences under the Computer Misuse Act (CMA) such as unauthorised access of computer material horse, spyware and adware. Personal Data / Data which, on its own (e.g. full name, NRIC number) or in combination with Information other available data (e.g. medical or educational information, can be used to distinguish or trace an individual’s identity. Phishing The complex environment resulting from the interaction of people, software and services on the Internet by means of technology devices and networks or installing malware. Ransomware It may spread through phishing e-mails that contain malicious attachments or links, or malicious pop-ups that appear when users access unsafe websites. Singapore’s cyberspace includes domain names with “.SG” or SingaporeService Providers (ISPs) located here. Malware that encrypts files on a victim's device, rendering them unusable until a ransom is paid, usually in the form of Bitcoin or other cryptocurrency. connected to it, which does not exist in any physical form. mentions, Internet Protocol (IP) addresses used in Singapore, and Internet A common technique used by threat actors to trick people (typically through e-mails) into divulging personal information, transferring money, and unauthorised use of computer service. Cyberspace Malicious software intended to perform unauthorised processes that will have adverse impact on the security of a computer system. E.g. virus, worm, Trojan digital or virtual currency. Examples include Bitcoin, Ether, and Litecoin. The unauthorized use of a computer or computer system by cybercriminals to The use of a software to record every keystroke that is made by a user on a computing device. It is usually done covertly for malicious intent, such as of exchange, a unit of account, or a store of value. Used synonymously with Crypto-jacking The vast network of everyday objects, like baby monitors, printers, televisions, and autonomous vehicles that are connected to the Internet. effect on the availability of the essential services in Singapore. Cryptocurrency An individual or group who wants to undermine the reputation or destabilise the operations of an entity, or to publicise their political or social agenda and network of compromised computers infected with malicious bots, controlled as Brute-force attack The unauthorised access, collection, use, disclosure, copying, modification, Spoofing Tricking computer systems or other users by hiding or faking one’s true identity. Commonly spoofed targets include e-mails, IP addresses, and websites. 50 51