Flashcards
Risk Management 5
Cards in this deck (38)
- 1What is the NIST definition of Malware?Program inserted into a system, with the intent of compromising the CIA of the victim’s data, applications, or operating system or otherwise annoying or disrupting the victim.
- 2What 2 broad categories is Malware classified on?- How it spreads to reach desired targets
- Actions/payloads performed when it reaches the target. - 3What other 4 things can Malware also be classified on?- Need a host program (parasitic code such as viruses)
- Independent, self-contained programs (worms, trojans, and bots)
- Does not replicate (trojans and spam e-mail)
- Does replicate (viruses and worms) - 4What is an Attack Kit?Programming tool that allows someone who does not have any experience writing software code to create, customize and distribute malware.
- 5What is another name for an Attack Toolkit?Crimeware
- 6What do Toolkits include?A variety of propagation mechanisms and payload modules that even novices can deploy
- 7What are toolkits an issue for those defending systems against them?Variants can be generated by attackers
- 8What is an example of an Attack Kit?- Zeus
- Angler - 9Give examples of Attack Sources- Politically motivated attackers
- Criminals
- Organized crime
- Organizations that sell their services to companies and nations
- National government agencies - 10What does APT stand for?Advanced Persistent Threat
- 11What are advanced persistent threats?Well-resourced, persistent application of a wide variety of intrusion technologies and malware to selected targets (usually business or political)
- 12What are APTs typically attributed to?State-sponsored organizations and criminal enterprises
- 13How do they differ from other types of Attack?Because of their careful target selection and stealthy intrusion efforts over extended periods
- 14What are some examples of APT attacks? (IRL)Aurora, RSA, APT1, and Stuxnet
- 15What are the 3 characteristics of APTs?- Advanced
- Persistent
- Threat - 16What does Advanced mean in terms of Malware Attacks?- Wide Variety of intrusion technologies and malware
- Development of Custom Malware
- Individual components may not be advanced but are carefully selected for specific target - 17What does Persistent mean in terms of Malware Attacks?- Application of attacks over extended periods of time to maximize success
- Variety of Attacks may be applied until target is compromised - 18Are APTs more of a threat than automated tools? Why?Yes, due to active involvement of attackers
- 19What is the Aim of an APT Attack?- Theft of intellectual property
- Theft of Security and Infrastructure related data
- Physical disruption of infrastructure - 20What techniques are used in APT attacks?- Social engineering
- Spear-phishing email
- Drive-by-downloads from selected compromised websites likely to be visited by personnel in the target organization - 21What is the Intent of APTs?- Infect target with sophisticated malware with multiple propagation mechanisms and payloads
- Once in the systems, deploy further attack tools used to maintain and extend access - 22What is a Virus?Piece of software that infects programs
- 23What does a Virus do?- Modifies program to include a copy of the virus
- Replicates and goes on to infect other content - 24Can a Virus spread over a network?Yes - not by itself though(?)
- 25When attached to an executable program what can a Virus do?Anything that the program is permitted to do
- 26How and when does it run?Executes secretly when the host program is run
- 27Which parts of a Computer is the virus specific to?Operating system and hardware
- 28What are the 3 Virus Components?- Infection mechanism
- Trigger
- Payload - 29What is another name for Infection Mechanism?Infection Vector
- 30What is an Infection Mechanism?Means by which a virus spreads or propagates
- 31What is a Trigger also known as?Logic Bomb
- 32What is a Trigger?Event or condition that determines when the payload is activated or delivered
- 33What is the payload?What the virus does (besides spreading)
- 34What does the payload involve/do?Causes damage or benign but noticeable activity
- 35What are the 4 Virus Phases?- Dormant Phase
- Triggering Phase
- Propagation Phase
- Execution Phase - 36Which phase do not all Viruses have?Dormant Phase
- 37What is a Macro Virus?Virus that attaches itself to documents and uses the macro programming capabilities of the document’s application to execute and propagate
- 38Why are Macro Viruses threatening?Is platform independent
Infect documents, not executable portions of code
Are easily spread
Information
- Description
- Risk Management and Cyber Security Flashcards on Risk Management 5, created by Emma McInally on 11/02/2020.
- Created by
- Emma McInally
- Views
- 0
- Rating