Flashcards
Security+ Chapter 4 _Types of Attack
Cards in this deck (52)
- 14.01UNDERSTANDING SOCIAL ENGINEERING
- 24 Different types of attacks*social engineering attacks
*network attacks
*password attacks
*software attacks - 3involves the hacker trying to trick an employee into compromising security through social contact such as phone call or emailSocial Engineering
- 4when a hacker tries to trick an employee into compromising security by phone, email, or in person conversation EX: hacker will act as if they need help *hacker is trying to collect information such as usernames and passwords used on netwokSocial Engineering
- 5Name 6 social engineering attacks*Impersonation
*Phishing
*Shoulder Surfing and Dumpster Diving
*Tailgating
*Hoaxes
* Whaling and vishing - 6Hacker impersonates another employee in the companyImpersonation
- 7hacker calls the user and tries to trick the user into compromising security by asking user to changing their password or give away account informationHacker impersonates administrator
- 8hacker calls network administrator pretending they don't know their password or how to get on the system; administrator may help the hacker gain access by resetting the passwordHacker impersonates user
- 9if hacker knows the name of personnel, they may call employees and ask employee to perform actions that can unsecure the systemHacker impersonates management
- 10E X A Mknow that social engineering attacks involve the hacker trying to trick someone into compromising security through social contact such as phone or email
- 11*hacker emails a user and pretends to be a rep from a bank or a company *email tells the user that a security incident has occurred and that the user should click the link in the email to navigate to the site and check account *the link the user is tricked into clicking navigates to a site that looks like a bank sitePhishing
- 12I N F Oif you receive a phishing email you can report to Anti-Phishing Working Group (APWG) at www.antiphishing.org/report-phishing/
- 13pic of email phishing attackpic
- 14I N F Okey thing to remember about social engineering attacks is that they typically don't involve technology
- 152 social engineering attacks that do not involve technology*shoulder surfing
*dumpster diving - 16hacker tries to view information by looking over employee's shouldershoulder surfing
- 17hacker goes through victim's garbage looking for documents or info. EX: hacker could locate a password that was written down and thrown in garbagedumpster diving
- 18*an attack against physical security *hacker walks through a secure area by following someone who has unlocked the door for themselvestailgaiting
- 19I N F Oits important to educate employees to know that its their responsibility not to open the door if someone is hanging around
- 20most effective way to control tailgatingmantrap
- 21*an area between two locked doors *the second door will not open until first door is closed; this helps authorized person to notice if anyone is entering facility with themmantrap
- 22E X A Mtailgating is when someone tries to slip through the door behind you after you unlock it. Also now that mantraps are popular security controls to help protect against tailgating
- 23email messages that users receive giving a false story and asking user to take action EX: a __ could say a certain file is causing serious flaw in the operating system and that the file should be deleted; but in reality there is nothing wrong with the file; and file may be needed for an important feature on the operating systemHoaxes
- 24I N F Oif you receive an email that makes claims that you are unsure of - go to Hoax Slayer website at www.hoax-slayer.com/
- 25*another form of phishing attack *email sent to trick someone into giving their account name and password to sites pretending to be a bank *hacker sends email to a specific person (the big fish) usually an executive at a companyWhaling Attack
- 26*a form of phishing attack *tries to trick people and steal money from them *the contact is made with the phone and not email; the hacker is using their voice EX: you receive a phone call from a company claiming to extend your car warranty - you pay but don't get the warrantyVishing attack
- 277 key reasons for hackers success with social engineering*Authority
*Intimidation
*Consensus/social proof
*Scarcity
*Urgency
*Familiarity
*Trust - 28the only way to protect yourself and the company from social engineering attacks is what two ways*training
*awareness - 29I N F Omake sure you have a method that's known to employees -to validate anyone calling and stating that they are a network admin and asking employees to change passwords
- 30E X A MSecurity training and awareness are the only ways to prevent social engineering attacks
- 314.02IDENTIFYING NETWORK ATTACKS
- 32Name 9 different network attacks*DOS
*DDOS
*Spoofing
*
*
*
*
*
* - 33*This attack involves the hacker overloading a system with request so the system is so busy servicing the hackers request that it cant service valid request for clients EX: hacker could overload a web server with a number of network request, making the web server unavailable to send web pages to customers in a timely manner *the attacker could cause target network to perform slowerDenial of Service
(DoS) - 34DOS Attack overloads a system, causing the system to slow down or crashpic 4.2
- 35*This attack is when the hacker uses a number of systems to perform the attack, which helps hacker create a large number of request. *the hacker first compromises and take control of a number of systems and use them to help with the attackDistributed Denial of Service
(DDoS) - 36Compromised systems that have no mind of their own and will do whatever the hacker tells them to dozombie systems
- 37*A DDoS attack that involves the hacker sending ping (ICMP) messages to a number of systems, but also spoofing the source IP address of the packets so that they appear to come from the intended victim. *All systems would then send there ICMP replies to the victim system, overburdening it with traffic and causing it to crashsmurf attack
- 38Smurf attackpic 4.3
- 39A type of attack where the hacker alters the source address of information to make the information look like its coming from a different personSpoofing
- 40Name 3 types of spoofing*IP spoofing
*MAX spoofing
*Email spoofing - 41When source IP address of a packet is altered so that it appears as if the packet comes from a different sourceIP Spoofing
- 42When the source MAC address of a frame is altered so it appears to have come from a different system or deviceMAC spoofing
- 43When the from address of an email message has been altered so that the email looks like it comes from someone elseEmail spoofing
- 44I N F O*the hacker may spoof a frame or a packet in order to bypass an access control list.
EX: most wireless networks implement MAC filtering, where only certain MAC addresses are allowed to access wireless network. Once hacker finds out what MAC addresses are allowed on the network, they spoof their MAC address to look like one of those addresses
*Hacker may also spoof the IP address to bypass a filter on a router that only allows traffic from specific address to pass through router - 45E X A MSpoofing is the altering of the source address to make the information look like it came from someone else. IP spoofing and MAC spoofing are popular methods used by hackers to bypass filters placed on firewalls and wireless networks
- 463 programs that can spoof packets* Nemesis
*Hping2
*Macchanger - 47A Linux packet-crafting program that creates different types of packets such as ARP or TCP packetsNemesis
- 48*A Linux packet-crafting program that is used to create ping packets that use TCP instead of ICMP packets. *Is useful to bypass a firewall that is blocking ICMP trafficHping2
- 49*A Linux program used to modify your MAC address *a common program used by hackers to spoof their MAC address in order to gain access to the wireless netwokMacchanger
- 50*The hacker captures network traffic and is able to view the contents of the packets traveling along the network *Also known as sniffingEavesdropping
- 51I N F O*a network switch will help protect against eavesdropping because the switch filters traffic and sends only the data to the port on the switch where the destination system resides
*however, the hacker can poison the MAC address table on the switch so that switch stops trusting the MAC address table and then starts flooding all frames to all ports - 52Network sniffer being used to view sensitive information on the networkfig 4.5
Information
- Description
- Types of Attack
- Created by
- Kimberly Stover · Dec 2016
- Updated
- Jan 5, 2017
- Views
- 9
- Rating