Module 7-9

Module 7-9

1. Module 7

   • Concepts
     • Web Application Architecture: The layout of software components (front-end, back-end, database) that make a web app function.
     • OWASP Top 10: A list of the top 10 most critical web application security risks maintained by the OWASP foundation.
   • Attacks
     • SQL Injection: Injecting malicious SQL statements via input fields to access or alter databases.
     • Cross-Site Scripting (XSS): Inserting malicious scripts into webpages to steal user data or hijack sessions.
     • Broken Authentication: Exploiting flaws in login systems to impersonate users
     • Sensitive Data Exposure: Leaking private data due to weak encryption or poor handling.
     • XML External Entity (XXE): Exploiting XML parsers to access internal files or systems.
     • Insecure Deserialization: Executing untrusted data objects that can be manipulated to execute code.
     • Security Misconfiguration: Default settings, unnecessary features, or open directories that expose the system.
   • Countermeasures
     • Input Validation: Checking user input for malicious data.
     • Parameterized Queries: Safe method of handling input with SQL to prevent injection.
     • TLS/SSL Encryption: Protects data in transit using encryption.
     • Security Patches: Fixes released for known vulnerabilities.
     • Logging & Monitoring: Tracking activity for suspicious behavior.

2. Module 8

   • Concepts
     • 802.11 Standards: Wireless networking protocols (Wi-Fi) defining how data is transmitted.
     • WEP/WPA/WPA2/WPA3: Different wireless encryption protocols, with WPA3 being the most secure.
     • Bluetooth Architecture: The structure defining how Bluetooth devices connect and communicate.
   • Attacks
     • Rogue Access Point: Unauthorized Wi-Fi hotspot used to intercept data.
     • Evil Twin Attack: A fake Wi-Fi AP mimicking a legitimate one to steal information.
     • MAC Spoofing: Changing a device’s MAC address to mimic another.
     • KRACK Attack: Exploits a flaw in WPA2 to intercept encrypted data.
     • Jamming: Disrupting wireless signals with noise.
     • Bluejacking: Sending unsolicited messages via Bluetooth.
   • Countermeasures
     • SSID Cloaking: Hiding a Wi-Fi network name.
     • MAC Filtering: Only allows devices with specific MAC addresses to connect.
     • WPA3 with 802.1x: Strong encryption with user authentication.
     • Disable Remote Admin: Prevents attackers from changing router settings.
     • Strong Passphrases: Using complex, long passwords.

3. Module 9

   • Concept
     • Mobile Attack Anatomy: The process and techniques used to exploit mobile devices.
     • BYOD (Bring Your Own Device): A policy allowing employees to use personal devices at work.
     • Mobile Device Management (MDM): Software for securing and monitoring mobile devices used in an organization.
   • Attacks
     • Mobile Malware: Malicious software like trojans or ransomware targeting phones.
     • Data Theft: Stealing sensitive user data like SMS, contacts, or GPS location.
     • Surveillance Attacks: Using spyware to access mic, camera, or communications.
     • App Vulnerabilities: Weaknesses in app code that allow exploits.
     • Mobile Botnets: A group of infected mobile devices used to perform attacks.
   • Countermeasures
     • Device Encryption: Scrambling data so it’s unreadable without a key.
     • Remote Wipe: Erasing a device’s data remotely if lost or stolen.
     • Sandboxing: Isolating apps from each other to prevent cross-access.
     • Secure Apps: Apps that use proper encryption and permissions.
     • User Education: Training users to recognize scams and threats.