Karteikarten
INFOSEC
Karten in diesem Stapel (76)
- 1is the practice of assuring information and managing risks related to the use, processing, storage, and transmission of information or data and the systems and processes used for those purposesInformation assurance
- 2Information assurance includes:• protection of the integrity,
• availability,
• authenticity,
• nonrepudiation and confidentiality of user data - 3to accomplish these tasks you need controls• physical
• technical
• administrative controls - 4is credited with the invention of the Caesar cipher c. 50 B.C.,Julius Caesar
- 5The British Government codified this, to some extent, with the publication ofthe Official Secrets Act in 1889.
- 6the United Kingdom By the time of the First World War, multi-tier classification systems were used to communicate information to and from various front.Government Code and Cypher School in 1919
- 7is the practice of defending information from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction.Information security
- 8Two major aspects of information security are:• IT security
• Information assurance - 9They are responsible for keeping all of the technology within the company secure from malicious cyber attacks that often attempt to breach into critical private information or gain control of the internal systems.IT security:
- 10The act of ensuring that data is not lost when critical issues arise. These issues include but are not limited to: natural disasters, computer/server malfunction, physical theft, or any other instance where data has the potential of being lost.Information assurance:
- 11is a branch of computer technology known as information security as applied to computers and networks.21. Computer security
- 12objective of computer security includes:• protection of information and property from theft,
• corruption, or natural disaster - 13means the collective processes and mechanisms23. Computer system security
- 14generic name for the collection of tools designed to protect data and to thwart hackersComputer Security
- 15measures to protect data during their transmission.25. Network Security
- 16measures to protect data during their transmission over a collection of interconnected networks.26. Internet Security
- 17is required because most organizations can be damaged by hostile (unfriendly and not liking or agreeing with something a hostile crowd) software or intruders.27. Computer security
- 18There may be several forms of damage which are obviously interrelated. These include:• Damage or destruction of computer systems. ™
• Damage or destruction of internal data. ™
• Loss of sensitive information to hostile parties. ™
• Use of sensitive information to steal items of monitory value. ™
• Use of sensitive information against the organization's customers which may result in legal action by customers against the organization and loss of customers. ™
• Damage to the reputation of an organization. ™
• Monitory damage due to loss of sensitive information, destruction of data, hostile use of sensitive data, or damage to the organization's reputation. - 19are primarily unwanted and potentially dangerous set of programs.1. Malware(Malicious Software)
- 20Malware can spread copies of itself to propagate and infect other systems.2. Propagation-
- 21Files can be corrupted and computer systems can be rendered useless in the aftermath of a malware infection.3. Destruction
- 22Malicious activities can be performed in stealth without the user’s consent or knowledge4. Unauthorized Activities
- 23Malware can open channels, or backdoors, for unknown remote accesses5. Opening Backdoors
- 24Digital information can be stolen6. Theft
- 25can take advantage of existing vulnerabilities to compromise the security of systems7. Exploitation Malware
- 26Malware can trick and fool users8. Deception
- 27Malicious activities can be performed in stealth, completely invisible to the user.9. Hidden Activities
- 2810. There are three (3) general types of malwares● Virus
● Worm
● Trojan Horses (or Trojans) - 29which is a combination of any or all of the three general types of malware.the Blended Threat
- 30is a type of malware that infects files.12. A virus
- 31is the capability of a virus to insert a copy of itself, or any malicious code,“Infection”
- 32on another executable code calledHost
- 3313. Some viruses search for executable files to infect in its desired directories and sub-directories.“direct infectors” or “direct infecting viruses”
- 3414. What Do Viruses Infect?As long as an executable code can be contained and as long as there is still enough space, a virus can possibly insert or injects its code there.
- 3515. The following are examples of common virus types:• Boot Virus
• Binary File Infectors
• Multipartite Viruses
• Macro Viruses-
• Script Viruses - 36These are viruses that infect a boot sector of a disk like a hard drive’s master boot record (MBR).• Boot Virus
- 37These are viruses that infect binary executable files like EXE and DLL files.• Binary File Infectors
- 38are hybrids of the boot viruses and binary file infectors as they are capable of infecting both the boot sectors and other binary executable files.• Multipartite Viruses
- 39In the form of a VBA code, macro viruses specifically target and infect Microsoft Office files.• Macro Viruses-
- 40These are viruses (which are also in the form of scripts) that infect scripts.• Script Viruses
- 4116. Types of File Infection:• Prepending Infection
• Cavity Infection
• Appending Infection
• Overwriting Infection
• Sandwich Infection (or Amoeba) - 42The virus code is inserted at the beginning of the host file.• Prepending Infection
- 43The virus code searches for unused spaces in the host body.• Cavity Infection
- 44Insertion of the virus code at the end of the host file.• Appending Infection
- 45The virus overwrites the host file.• Overwriting Infection
- 46The virus surrounds the host body with its code upon infection.• Sandwich Infection (or Amoeba)
- 4717. Malware behavior can be placed into one of three classifications• Installation
• Propagation
• Payload - 48are also known as “symptoms of infection” because most of them are visible to the user.18. Payloads
- 49examples of malware payloads:● Display images and/or messages
● Generate Sounds
● Execute other applications abnormally or without user intervention
● Reboot or shutdown the computer automatically
● Slow down the computer
● Alter desktop and taskbar settings - 50can duplicate itself and send its copies over the network to infect other systems.20. A worm
- 51look in several places for email addresses on the infected computer, including email addresses from the user’s inbox, Windows address book (WAB) file, and files that may contain email addresses (such as HTML files).21. Mass mailing worms
- 52was created by Jarkko Oikarinen in 1988 with the purpose of allowing a group of people to send messages (or chat) among them simultaneously over a given communication channel.22. Internet Relay Chat (IRC)
- 5323. IRC is composed of both aa server and a client application
- 5424. There are two types of network implementations for file sharing:• Client-Server
• Peer-to-Peer (P2P) - 5525. The purpose of P2P applicationsis to allow internet users to easily and directly share files to many people simultaneously.
- 56The concept of the “buffer overflow”placing two or more KB of data in a memory location that is designed to hold only one KB of data results to an overflow that can be exploited.
- 57this propagation method,the worm first searches for vulnerable machines across the network. This is done through “IP scanning.” Once a vulnerable machine is found, the worm will send crafted packets that contain an exploit code (or payload). Because of the vulnerability, the exploit code is executed on the target machine.
- 58are malware that do not have the capability to spread or propagate because they do not have the mechanism to send their own copy to another computer.28. Trojans
- 5929. Kinds of Trojans:• Destructive trojans
• Trojan Droppers
• Trojan Downloaders
• Trojan Clickers
• Trojan Backdoors
• Trojan Spies
• Trojan Proxies - 6030. There are several forms of DoS:• Land Attack
• Flooders
• Distributed denial-of-service attack - 6131. all types of network packets can be used for DoS attacks; however, here are the most used:● Ping Flood (or Ping of Death)
● SYN Flood - 6233. There are several types of ransomware. The most popular ones include:• Cryptolocker -
• Lockscreen Ransomware -
• CBT Locker - 63have payloads that can be triggered by time or by a specific event• Destructive trojans-
- 64act as carriers for other malware• Trojan Droppers
- 65act as agents for other malware• Trojan Downloaders
- 66bait users into accessing malicious websites or any other sites that users don’t intend to access.• Trojan Clickers
- 67Backdoor malware has two components: a server and a client.• Trojan Backdoors
- 68is information theft. These malwares are capable of monitoring and logging information that is related to users’ computing and web browsing habits• Trojan Spies
- 69is a form of DoS that is done by simply redirecting all packets which the infected machine has been sending, to itself• Land Attack
- 70• flood the network with garbage packets. “Nuking” is a term used for sending a lot of garbage packets to a single target machine.• Flooders
- 71is the simultaneous nuking of a single target machine from several sources• Distributed denial-of-service attack
- 72—Prepending Infection
- 73—Cavity Infection
- 74—Appending Infection
- 75—Overwriting Infection
- 76—Sandwich Infection
Informationen
- Beschreibung
- Karteikarten am INFOSEC, erstellt von Nefera Tiri am 19/03/2023.
- Erstellt von
- Nefera Tiri
- Aufrufe
- 1
- Bewertung