Fichas
CompTIA Security + 1.2 Attack Types
Fichas del conjunto (41)
- 1Malware-Malicious software
-Gathers information (keystrokes)
-Can control your computer
-Shows advertising - 2Virus-Malware that can reproduce itself
-Must be executed by a human being
-Reproduces thru file systems or the network
-May or may not cause further damage - 3Virus Types-Program Virus (part of an app)
-Boot Sector Virus (in boot sector of a storage device)
-Script Virus (operating system or browser)
-Macro Virus (Common in Microsoft Office) - 4Fileless Virus-A stealth attack (avoids anti-virus detection)
-Operates in memory (never installed) - 5Worms-Malware that self replicates (no user needed)
-Spreads quickly using network as a transmission medium
-Firewalls and IDS/IPS can mitigate - 6Ransomware-Malware that requires victim to pay for their data or to unlock their system
-In some cases malware may be removed - 7Crypto-malware-Uses photography to encrypt your personal info
-Can only be decrypted with the proper key (which they will make you pay for) - 8How to protect against ransomware?-Have a backup (offline)
-Keep your system up to date
-Keep apps up to date
-Keep anti virus sigs up to date - 9Trojan horse-Software that pretends to be something else
-Circumvents your existing security
-Once inside it has free reign
-Commonly downloads PUPs - 10Potentially Unwanted Program(PUP)Examples
-Overly aggressive browser toolbar
-A backup utility that displays ads
-Browser search engine hijacker - 11Backdoors-Malware creates a new way to get into your system
-Some malwares can take advantage of backdoors created by other malwares
-Some software includes backdoors - 12Remote Access Trojans (RAT)-Remote Administration Tool
-Malware installs the server/service/host
-Control a device by key logging, screen recording, copying file, and embedding malware - 13Rootkits-Modifies core system files (in the kernel)
-Can be visible to the operating system
-Zeus/Zbot and Necurs are utilized - 14How to find/remove rootkits-Use anti malware scans
-Use rootkit remover
-Secure boot with UEFI - 15Adware-Advertisements all over your computer
-May cause performance issues
-Accidentally installed - 16Spyware-Malware that spies on you including ads, identity theft, affiliate fraud
-Can trick you into installing
-Monitors what you browse
-Keyloggers to capture strokes - 17Protecting against spyware-Maintain your anti malware
-Be mindful of what you install
-Have a backup
-Run scans - 18Bots-once your machine is infected it becomes a bot
-It gets on your computer through trojan horses
-Command and Control server controls - 19Botnets-group of bots working together
-DDoS (Distributed Denial of Service)
-Relays spam, proxy network traffic, etc
-Botnets are for sale - 20How to stop bots-Prevent initial infections
-On-demand scans and network monitoring
-Prevent C&C by blocking it at the firewall - 21Logic bomb-waits for a predefined event
-time bomb (time or date)
-user events
-difficult to recover or identify - 22How to prevent a logic bomb-Difficult to recognize
-electronic monitoring such as host based intrusion detection or tripwire
-constant administrator auditing - 23Plaintext-unencrypted passwords
-some apps store passwords that can be fully seen - 24Hashing a password-Hashes represent data as a fixed-length string of text "fingerpringt"
-one way trip meaning it's impossible to restore the original message - 25Spraying Attack-try to login with an incorrect password
-eventually gets locked out
-attacks an account with the top 5 passwords, if not they move on to the next - 26Brute Force-try every possible password combo until the hash is matched
-takes plenty of time to get right
-can brute force the hash offline if they have a list of users - 27Dictionary Attack-use common words to find passwords
-there are common wordlists on the net
-letter substitutions to crack passwords - 28Rainbow Tables-an optimized pre-built set of hashes
-saves time and storage space
-different tables are needed for different hashing methods - 29What is adding salt mean-random data added to a password when hashing
-every user gets their own random salt
-prevents rainbow table from working - 30Malicious USB cable-resembles a normal usb
-operating system identified as a HID (human interface device)
-once connected the takeover begins - 31Malicous flash drive-Can still act as an HID such as a keyboard
-older operating systems would run automatically
-attackers can load malware in docs
-can act as an ethernet adapter of configured as a boot device - 32Skimming-stealing credit card info during a normal transaction
-copies data from the magnetic stripe
-ATM skimming includes a camera to watch for PIN - 33Poisoning Training Data-Done to confuse AI by sending modified training data created by the attacker
-causes the AI to behave incorrectly - 34Evasion Attacks-the AI is only as good as its training
-an AI that recognizes spam can be fooled if the attacker uses a different approach - 35Supply Chain-includes raw materials, suppliers, distributors, manufacturers, customers, consumers
-Attacker can effect any step of the chain, which will damage the entire chain - 36Cloud-Based security-centralized security
-costs less
-uses a 3rd party
-no hardware - 37On-Premises Security-date center security and infrastructure costs
-you have full control in-house
-On site IT team can manage security
-cost more than cloud security - 38Cryptographic Attacks-finding ways to undo the security
-attacks by finding a weakness in the code or another aspect of the cryptographic system - 39Birthday Attack-in the digital world this is known as a hash collision
-attackers spend time generating multiple versions of plaintext
-similar to figuring out chances of 2 students in a classroom sharing the same bday - 40Why are Collisions bad-different input data should never create the same hash
- 41Downgrade Attack-attack that forces the systems to downgrade their security
Información
- Descripción
- CompTIA Security + IT (Cybersecurity) Fichas sobre CompTIA Security + 1.2 Attack Types, creado por Demetrius Sharkey el 31/01/2022.
- Creado por
- Demetrius Sharkey
- Visitas
- 2
- Valoración