Karteikarten
Software Vulnerabilities
Karten in diesem Stapel (21)
- 1How is malware categorised?1. How it proliferates
2. What it does - 2How can malware proliferate?1. Virus
2. Worm
3. Trojan
4. Exploit - 3What is a payload?The actual malware
- 4Give 3 example payloads1. Backdoor
2. Rootkit
3. Ransomware
(Bonus: 4. Spyware 5. Adware) - 5Discuss VirusesSelf-replicating code.
Attach to programs/files.
Install without user knowledge/consent. Proliferate when run. - 6How can they attach? (4)1. Boot sectors
2. Executables
3. Scripts
4. Macros - 7Discuss WormsSelf-replicating stand-alone programs. Replicate by exploiting known software vulnerabilities.
Doesn't require human interaction - 8Discuss TrojansMalware disguised as legitimate programs. Requires human error.
Doesn't replicate. - 9What is backdoor?Provides easy access to a system.
Subtly change software/kernel.
Reverse shell for instructions. - 10What is a rootkit?Hides other malware from the OS.
Typically resides in the kernel. - 11What is malware?Encrypt files.
Demand a ransom for the decryption key. Typically too late when detected by an AV. - 12What is the Exploit Lifecycle?1. Vulnerability is disclosed
2. Patch is produced/released
3. Exploit create alongside / reverse engineered from patch - 13What is a Zero-day Exploit?One which exploits a previously unknown vulnerability
- 14Give 3 types of Anti-Virus1. Signature Based: Only works on known malware
2. Heuristics
3. Machine Learning - 15What are exploits?Gain access to a system through a software vulnerability
- 16Give 3 examples of how exploits happen1. Programming errors
2. Unchecked user inputs
3. Bad protocols - 17Name 3 types of exploits1. Buffer overflows
2. Return-oriented Programming
3. Race conditions - 18Name a Buffer Overflow attackStack Smashing
- 19How does it work?Overwrite stack to:
1. Write exploit code
2. Overwrite return address pointer to point to exploit code. (E.g. strcpy) - 20Give 2 ways in which it can be protected against1. Canaries: Insert known value into stack, check it is the same after function execution
2. NX-bit: CPU bit to mark memory as non-executable. Mark the stack as NX - 21What is Heartbleed and how does it work?Exploits TLS.
Buffer Over-read attack.
Request more data then required from server.
Server returns memory contents.
Informationen
- Beschreibung
- Bachelors Degree Computer Science (Computer Security) Karteikarten am Software Vulnerabilities, erstellt von Alex Neves am 25/05/2016.
- Erstellt von
- Alex Neves
- Aufrufe
- 4
- Tags
- Bewertung