Save
Busy. Please wait.
Log in with Clever
or

show password
Forgot Password?

Don't have an account?  Sign up 
Sign up using Clever
or

Username is available taken
show password


Make sure to remember your password. If you forget it there is no way for StudyStack to send you a reset link. You would need to create a new account.
Your email address is only used to allow you to reset your password. See our Privacy Policy and Terms of Service.


Already a StudyStack user? Log In

Reset Password
Enter the associated with your account, and we'll email you a link to reset your password.
focusNode
Didn't know it?
click below
 
Knew it?
click below
Don't Know
Remaining cards (0)
Know
0:00
share
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.

  Normal Size     Small Size show me how

Chap3

TermDefinition
ActiveX A set of rules for how applications under windows os should share info
ActiveX Control A specific way of implementing ActiveX that runs through the web browser and functions like a mini application
add-on program that provides additional functionality to a web browsers
Address Resolution Protocol Part of the TCP/IP protocol for determining the MAC address based on the IP address
arbitrary/remote code execution an attack that allows an attacker to run programs and execute commands on a different computer
ARP poisioning Attack that corrupts the arp cache
Attachment a file included in an email that contains malicious software
Buffer overflow attack attack where the process tries to store data in ram beyond the fixed boundaries if the fixed-length storage buffer
client-side attack an attack that targets vulnerabilities in client applications that interact with a compromised server or process malicious data
Command injection injecting and executing commands to execute on a server
Cookie fine on the local computer that stores user specific data
Cross-site scripting attack that injects script into a web application server to direct attacks at clients
DOS attack that tries to stop a system from performing its normal functions by overwhelming the system with requests
directory travercial attack that takes advantage of a vulnerability so that a user can move from the root directory to restricted directories
DDoS attack that uses many computers to perform a dos attack
DNS Poisioning attack that substitutes dns addresses to automatically redirect a computer to an attacker's device
DNS a hierarchical name system for translating domain names to IP addresses
extension an addon
first-party cokie cookie created by the current website being used
Flash cookie a locally shared object
host table a list of the mappings of host names to IP addresses
HTTP header Part of HTTP that is comprised of fields that contain the different characteristics of the data that is being transmitted
HTTP header manipulation Modifying the HTTP header to create an attack
integer overflow attack attack where the attacker changes the value of a variable to something outside the range that the programmer intended
LSO cookie that is significantly different in size and locations from regular cookies and can store more complex info
Man-in-the-middle attack that intercepts real communications and forges a fake response to the sender
persistent cookie cookie that is recorded on the hard drive of the computer and does not expire when the browser closes
ping utility that sends an ICMP echo request message to a host
ping flood attack that uses ICMP to flood a victim with packets
plug-in third-party library that attaches to a web browser and can be embedded inside of a web page
privilege escalation attack that exploits a vulnerability in software to gain access to resources that the user normally would be restricted from accessing
replay attack that makes a copy of the transmission before sending it to the recipient
session cookie a cookie that is stored in ram instead of on the hard drive and only lasts the duration of a visit to a website
session hijacking attack where an attacker attempts to impersonate the user by using the user's session token
session token a form of verification used when accessing a secure web app
smurf attack attack that broadcasts a ping request to computers yet changes the address so that all responses are sent to the victim
spoofing impersonateing another computer or device
sql injection Attack that targets SQL servers by injecting commands to be manipulated
SYN flood attack an attack that takes advantage of the procedures for initiating a TCP/IP session
third-Party cookie a cookie that was created by a third party that is different from the primary website
transitive access attack that exploits the trust relationship between three parties
XML A markup language designed to carry data in contrast to html which indicates how to display data
XML injection Attack that injects XML tags and data into a database
Zero-Day attack attack that exploits previously unknown vulnerabilities, so victims have no time to prepare for or defend against the attack
Created by: JacobAntholz
Popular Math sets

 

 



Voices

Use these flashcards to help memorize information. Look at the large card and try to recall what is on the other side. Then click the card to flip it. If you knew the answer, click the green Know box. Otherwise, click the red Don't know box.

When you've placed seven or more cards in the Don't know box, click "retry" to try those cards again.

If you've accidentally put the card in the wrong box, just click on the card to take it out of the box.

You can also use your keyboard to move the cards as follows:

If you are logged in to your account, this website will remember which cards you know and don't know so that they are in the same box the next time you log in.

When you need a break, try one of the other activities listed below the flashcards like Matching, Snowman, or Hungry Bug. Although it may feel like you're playing a game, your brain is still making more connections with the information to help you out.

To see how well you know the information, try the Quiz or Test activity.

Pass complete!
"Know" box contains:
Time elapsed:
Retries:
restart all cards