Flashcards
Attack Methods
Flashcards do conjunto (35)
- 1Attack Methods/Sniffing(sniffers/network monitor/protocol analyzer): passive access; common for e-mail, file & print servers
Mitigate: encryption, Switches - 2Man-In-The-Middlevia ARP poisoning, MAC flooding; active access permits snooping, modification, DOS..
Mitigate: Port Security, Strong Auth., Encryption - 3DoSDenies legitimate users access to PC or services
- 4Smurf/FraggleSmurf: broadcast Ping with spoofed source IP
Fraggle: like smurf but broadcast UDP
Mitigate: Patch - 5Broadcast stormenabled by L2 redundancy
Mitigate: loop protection - 6Ping of DeathSending ICMPs and improperly formatted MTUs that when reassembled crash server
Mitigate: Patch - 7Failure to validate inputBuffer overflows (receiving more data than expected); SQL, HTML, XML, and LDAP injections. Considered sloppy programming.
Enables DOS; privilege escalation, database and dir service modification; directory traversal
Mitigate: input validation, no verbose error messages - 8Dial ToneConstant handshaking with modem
Mitigate: Inventory and disable modems - 9War DrivingUsing WiFi NICs & stumbler tools to site survey WAPs ; Triangulate with GPS for accessible wifi to send a request of service to routers in an area
Mitigate: Disable SSID broadcasting, decrease power - 10Evil TwinMalicious WAP impersonating legitimate
Mitigate: Strong Authentication & encryption; wireless IPS - 11Bluesnarfing/BluejackingBluesnarfing- Intercepting files
Bluejacking- receiving unsolicited text
Mitigate: Encrypt; turn off auto-discovery, auto-pair - 12DDoSUses zombies (bots, agents, handlers) to attack
Mitigate: AV, patches, IDSs; take down C&C channel - 13Replay/Playbackcapture & replay, pretend to be client
Mitigate: Kerberos, PKI, CHAP - 14Brute ForceTries every combo of characters until key or password cracked, longest to perform
Mitigate: OTP, long/complex key space - 15Malicious Port Scanningfingerprints unique replies
Mitigate:IDS/IPS - 16Backdoor 1/Backdoor 21: Illicit server-Netbus, back orifice, BO2K, LOKI, Masters Paradise, NetCaZ
2: Maintenance hooks bypass code checks
Mitigate: AV, Patches, IDSs - 17VirusReplication, activation, objective, requires host file/program and user participation
- 18WormSelf replicating, no host or user interaction required to spread
- 19Trojan Horsewrapper disguise tricks user into running
- 20RansomewareEncrypts drive, ransome key
- 21Logic Bomblays dormant then triggered by event
- 22Rootkitundetectable admin presence
Mitigate: Anti Virus (AV), awareness, email scanning - 23Malformed MIMECan crash email server, mislabeled can auto execute
- 24PharmingDNS poisoning
- 25Transitive AttackAssigned trust becoming inherited
- 26Social EngineeringUses con artist techniques, flattery, assuming authoritative position, low tech
Mitigate: Training, User awareness, ID proofing, Clean desk policy - 27TypoSquattinghijacking misspelled URLs
Mitigate:Use web proxy filters - 28Watering Hole AttackBait popular employee spots
Mitigate: Security awareness training - 29Piggybacking/TailgatingPerson follows another to gain entry
Mitigate:Mantraps, turnstiles, guard, users challenge - 30Tracking cookieSpy/adware tracking users activity
Mitigate: Disable 3rd party cookies, LSOs, AV software - 31Phishing/Whaling/VishingSeeking personal info
Mitigate: Awareness, email filters, encrypt VoIP - 32XXS- Cross Site ScriptingUnintended execution of dynamically rendered content
-CGI (server), JavaScript (Client): Most vulnerable to XSS
-ActiveX: ie: calender control (authenticode=dig sign)
-Java: Uses sandbox or signed applet; called safest - 33Mandatory access control (MAC)Subject and object, sensitivity/security labels, lattice, static, set by admin, most secure
- 34Discretionary access control (DAC)Runs on identity of user or process, vulnerable to trojans, most granular and difficult to manage, access set by user, least secure
- 35role-based access control (RBAC)Role based on job or task, easiest to manage. rule based on set of rules like ACL on router
Informações
- Descrição
- FlashCards sobre Attack Methods , criado por cholera_morbus em 14-04-2015.
- Criado por
- cholera_morbus
- Visualizações
- 0
- Avaliação