Karteikarten
CSAD Chapter 2
Karten in diesem Stapel (9)
- 1Motivation of HackingRecognition, Admiration, Curiosity, Revenge, Power & Gain
- 2Exploiting WeaknessesOS, Applications, Shrink-Wrap Code, Misconfigurations
- 3Types of AttacksActive attacks (manipulating, violates confidentiality, integrity and availability and authentication), passive (no modifying, getting information, violates confidentiality), Inside & Outside
- 4ReconnaissanceGather information, more information = higher chance of success, passive without connecting, active by probing network, Whois Fine Web Enumeration Low-Tech
- 5Scanningexamine target's network, relies in automated tools, war dialers war driving network mappers port scanners vulnerability scanners
- 6Gaining accessAttacker will try to gain access, breaking in, manipulating software, exploiting pw storage, poorly encrypted data, exploiting vulnerabilities of network or OS, scripts, password attacks, protocol-based or web-based attacks, privilege escalation
- 7Maintaining Accessneed to keep access, secure exclusive access, owned system sometimes known as zombie and used for further attacks, planting trojan horses/backdoor software/rootkits
- 8Covering tracksavoid detection, continue owning system, remove evidence, avoid legal action, erase records of intrusion, hide backdoors, altering logs, switch off IDS, hide files, using tunnel
- 9CountermeasuresHost (unused ports, disable services, up-to-date, harden system, automate logs), Network (deploy defense, lockdown mechanism, regular audit), implement policies, create awareness & training
Informationen
- Beschreibung
- CSAD Karteikarten am CSAD Chapter 2, erstellt von Jan-Hendrik Maas am 21/02/2018.
- Erstellt von
- Jan-Hendrik Maas
- Aufrufe
- 1
- Bewertung