Fichas
Security+ 1.0 Threats, Attacks and Vulnerabilities
Fichas del conjunto (90)
- 1Armored Virus Protected in a way that makes reverse engineering difficult.
Makes it ‘armored’ against antivirus programs that have trouble getting to, and understanding, its code. - 2Companion Virus Creates a new program that runs in the place of an expected program of the same name.
- 3Macro Virus A software exploitation that works by using the macro feature included in many apps, such as Microsoft Office.
- 4Multipartite Virus A software exploitation that works by using the macro feature included in many apps, such as Microsoft Office.
- 5Phage Virus Modifies and alters other programs and databases
- 6Polymorphic Virus Changes form or mutates to avoid detection.
- 7Retrovirus Attacks or bypasses the AV installed on a computer.
- 8Stealth Virus Attempts to avoid detection by AV and from the OS by remaining in memory.
- 9Crypto-malware or Ransomwareo Malware that uses cryptography as part of the attack.
o Prevents users from accessing their system or personal files through encryption and demands ransom payment in order to regain access.
o Ransomware authors order that payment be sent via cryptocurrency, online payment systems, or credit card. - 10Wormso Use network to replicate copies of themselves to systems or devices automatically and without user intervention
o To spread, worms either exploit a vulnerability on the target system or use social engineering to trick users into executing
o Takes advantage of file-transport or information-transport features on the system, allowing it to travel unaided - 11Trojanso A harmful piece of software that looks legit or is included with legit apps
o Any app that masquerades as one thing in order to get past scrutiny and then does something malicious
One major difference between a virus and a trojan is that Trojans tend not to replicate themselves - 12Rootkito A clandestine computer program designed to provide continued privileged access to a computer while actively hiding its presence.
o Has the ability to obtain admin or root-level access and hide from the OS. - 13Keyloggero Software programs or hardware devices that track the activities from input devices. ie: Keys pressed of a keyboard or Mouse clicks
- 14Spyware/Adwareo Applications that covertly monitor online behavior without the user’s knowledge or permission
o Collected data is relayed to outside parties, often for use in advertising
o Otherwise, does not harm the infected computer, user or data
o There is a line between illegal spyware and legitimate data collection - 15BotsAn automated software program (network robot) that collects information on the web. In its malicious form, a bot is a compromised computer being controlled remotely
- 16BotnetA network of compromised computers under the control of a malicious actor (AKA Command & Control Server or CnC)
- 17RAT (Remote Access Trojans or Remote Administration Tools)Software that remotely gives a person full control of a tech device
- 18Logic BombAny code that is hidden within an app and causes something unexpected to happen based on some criteria being met.
Examples:
A programmer could create a program that always makes sure his name appears on the payroll roster; if it doesn’t, then key files begin to be erased
Backdoor is created during certain times - 19Backdooro Undocumented way of accessing a system, bypassing the normal authentication mechanisms
o An opening left in a program application (usually by the developer) that allows additional access to systems or data. These should be closed when the system is moved to production - 20Advanced Persistent Threat (APT)An attack in which unauthorized persons gain access to a network using advanced exploitation techniques and stay there undetected for a long period of time. The intention of an APT attack is to steal data rather than to cause damage to the network or organization.
- 21PhishingSending emails purporting to be from reputable companies in order to induce individuals to reveal personal information
- 22Spear PhishingSending emails ostensibly from a known or trusted sender in order to induce targeted individuals to reveal confidential information
- 23WhalingPhishing attack that is specifically aimed at wealthy, powerful, or prominent individuals
- 24VishingMaking phone calls or leaving voice messages purporting to be from reputable companies
- 25PharmingTraffic redirect to a spoofed website
- 26Tailgating AKA Piggy-backingGaining entry to electronically locked systems by following someone through the door they just unlocked.
- 27Dumpster divingThe practice of foraging in garbage that has been put out on the street in dumpsters, garbage cans, etc., for discarded items that may still be valuable, useful, or used to commit fraud
- 28Shoulder surfingWatching someone “over their shoulder” when they enter sensitive data such as a password or credit card information
- 29HoaxMalicious actors issuing false warnings to alarm users
- 30SwattingFraudulent calls to the police
- 31Watering hole attackA security exploit in which the attacker seeks to compromise a specific group of end users by infecting websites that members of the group are known to visit
- 32Denial of Service (DoS)Preventing access to resources by users authorized to use those resources. Attacking systems availability
- 33Distributed Denial of Service (DDoS)A DoS attack utilizing multiple compromised computer systems as sources of attack traffic (via botnets)
- 34Man-in-the-middle Attacker secretly relays and possibly alters the communication between two parties who believe they are directly communicating with each other
The attacker may either observe (confidentiality attack) or alter (integrity attack) - 35Buffer overflow Type of injection attack
When more data are written to a buffer than it can hold
An anomaly where a program, while writing data to a buffer, overruns the buffer’s boundary and overwrites adjacent memory locations - 36InjectionOccurs when untrusted data is sent to an interpreter as part of a command or query. Filter input to prevent
- 37Cross-site scriptingOccurs whenever an application includes untrusted data in a new web page without proper validation or escaping, or updates an existing web page with user-supplied data using a browser API that can create HTML or JavaScript
- 38Cross-site request forgeryAn attack that forces an end user to execute unwanted actions on a web app. AKA session riding or one-click attack
- 39Privilege EscalationGaining elevated privileged access to resources that are normally protected from an application or user
- 40AmplificationThe goal of the attacker is to get a response to their request in a greater than 1:1 ratio so that the additional bandwidth traffic works to congest and slow the responding server down
- 41Zero dayAttack that exploits a previously unknown security vulnerability
- 42Replay – AKA Masquerading or Impersonation The act of pretending to be someone or something to gain unauthorized access to a system
Capturing network traffic via eavesdropping, then reestablishing a communications session by replaying captured traffic using spoofed authentication creds - 43ClickjackingTricking a web user into clicking a spoofed button or graphic
- 44Session hijacking (Cookie hijacking)Exploiting a valid computer session, or session key, to gain unauthorized access to information or services
- 45URL hijacking/Typo squattingThe act of registering domains that are similar to those for a known entity but based on a misspelling or typographical error
- 46Domain Hijacking/DNS poisoningWhen an attacker alters the domain-name-to-IP-address mappings in a DNS system to redirect traffic to a rogue system or perform a DoS attack
- 47Domain Hijacking/DNS SpoofingWhen an attacker sends false replies to a requesting system in place of a valid DNS response
- 48Network hijacking/MAC SpoofingTechnique for changing a factory-assigned MAC address of a network interface on a networked device
- 49Network hijacking/IP SpoofingA technique used to gain unauthorized access to machines, whereby an attacker illicitly impersonates another machine by manipulating IP packets. Involves modifying the packet header with a forged (spoofed) source IP address, a checksum, and the order value
- 50ARP poisoning AKA ARP SpoofingWhen an attacker sends a fake ARP (Address Resolution Protocol) messages over a local area network. Results in the linking of an attacker’s MAC address with the IP address of a legitimate computer or server on the network
- 51ShimmingCreating a library – or modifying an existing one – to bypass a driver and perform a function other than the one for which the API was created
- 52RefactoringSet of techniques used to identify the flow and then modify the internal structure of code without changing the code’s visible behavior. Used in Mac spoofing and IP spoofing.
- 53Evil twinA rogue wireless access point poses as a legitimate wireless
- 54Rogue APAny wireless access point added to your network that has not been authorized
- 55JammingCausing interference with a wireless signal
- 56BluejackingThe sending of unsolicited messages (think SPAM) over a Bluetooth connection
- 57BluesnarfingThe gaining of unauthorized access and intercepting data through a Bluetooth connection
- 58Birthday AttackAn attack on cryptographic hash that looks for hash collisions, exploiting the 1-to-1 nature of hashing functions
- 59Frequency AnalysisLooking at the blocks of an encrypted message to determine if any common patterns exist
- 60Rainbow tablesAll of the possible password hashes are computed in advance and those hash values are compared with the password database. Rainbow tables are extremely large files, often exceeding several TB.
- 61DictionarySystematically entering each word in a dictionary as a password
- 62Brute forceSystematically attempting all possible combinations of letters, numbers, and symbols. Usually automated.
- 63Pass the hashAn attacker attempts to authenticate to a remote server or service by intercepting password hashes on a network.
- 64Threato A potential occurrence that can result in an undesirable outcome
o A person or thing likely to cause damage or danger - 65Threat ActorA person or entity that is responsible for an event or incident that impacts, or has the potential to impact, the safety or security of another entity
- 66Script KiddiesPeople who use hacking techniques but have limited skills.
- 67HacktivistPerson who uses hacking techniques to accomplish some activist or political goal.
- 68Organized crimeHighly organized groups seeking to steal money, identities, or corporate secrets
- 69Nation statesCountries sponsoring illegal or fraudulent actions.
- 70InsidersInternal employees seeking to cause damage to their organization
- 71CompetitorsOutside organizations seeking to commit corporate espionage for financial or market gain
- 72Open-Source Intelligence (OSINT)Any information having military, political, organizational, or financial value, that is readily available to anyone (e.g., Newspapers/News sites)
- 73Deep WebAnything on the Internet that a search engine can’t find
- 74Dark WebPart of the Deep Web Internet that is only accessible by means of special software (TOR), allowing users and website operators to remain anonymous
- 75Dark Web MarketA part of the Dark Web often illegally selling goods, merchandise, data/information, or services.
- 76Penetration (Pen) TestAn authorized, simulated attack on a computer system or network, performed to evaluate the security of the system by actively exploiting found vulnerabilities. AKA Ethical Hacking
- 77Active ReconnaissanceGathering information about targeted systems by actively engaging with the targeted system. Directly focuses on the system (port scans, traceroute info, network mapping, vulnerability scanning) to identify weaknesses that could be used to launch an attack.
- 78Passive ReconnaissanceAn attempt to gain information about targeted computers and networks without actively engaging with the systems.
o Examples: collecting info from public databases, talking to employees/partners, dumpster diving, etc. - 79PivotAttacking a system using another, compromised system that’s trusted to the one you are attacking. Often done on the same network through “island hopping”
- 80Initial ExploitationGain a foothold on a system/network. This is often with lesser privileges of access
- 81PersistenceMaintaining access for a period of time/hiding
- 82Black BoxThe tester has absolutely no knowledge of the system and is functioning in the same manner as an outside attacker
- 83White BoxThe tester has significant knowledge of the system. This simulates an attack from an insider – a rogue employee
- 84Gray BoxThis is a middle ground between the first two types of testing. In gray box testing, the tester has some limited knowledge of the target system
- 85Vulnerability ScanningAn inspection of the potential points of exploit on a computer, network, or application to identify security holes. A vulnerability scan detects and classifies system weaknesses in computers, networks, and communications equipment and predicts the effectiveness of countermeasures
- 86Risk AssessmentAllows an organization to understand the cyber security risk to organizational operations (including mission, functions, image, or reputation), organizational assets, systems or individuals
- 87Race conditionsThe behavior of an electronics, software, or other system where the output is dependent on the sequence or timing of other uncontrollable events. When events do not happen in the order the programmer intended
- 88End-of-Life SystemsOS or application that is no longer supported by the vendor
- 89Embedded SystemsSystems using specialized chips within devices that contain operating systems themselves
- 90System SprawlAllowing unchecked systems or devices on an internal network. Usually due to a lack of an internal inventory system
Información
- Descripción
- Covers CompTIA Security+ Certification Exam Domain 1.0: Threats, Attacks and Vulnerabilities
- Creado por
- Chad Shreffler
- Visitas
- 33
- Valoración