Save
Upgrade to remove ads
Busy. Please wait.
Log in with Clever
or
show password
Forgot Password?
Don't have an account?  Sign up 
Sign up using Clever
or
Username is available taken
show password


Make sure to remember your password. If you forget it there is no way for StudyStack to send you a reset link. You would need to create a new account. Your email address is only used to allow you to reset your password. See our Privacy Policy and Terms of Service.

Already a StudyStack user? Log In

Reset Password
Enter the associated with your account, and we'll email you a link to reset your password.
focusNode
Didn't know it?
click below
 
Knew it?
click below
Don't Know
Remaining cards (0)
Know
0:00
edit
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.

  Normal Size     Small Size show me how

CH1Vulnerabilites

Software Vulnerability Fundamentals_Introduction : The Art of Software Security

QuestionAnswer
What makes modern remote software exploits seem like "digital magic" at first glance, and what is the reality behind them? Illusion: Complex expert written software deployed4decades is suddenly coopted by attackers Reality:The sense of wonder fades once understand mechanics Truth: Software vulnerabilities r existing weaknesses n system that attackers leverage
In the context of software security, vulnerabilities are specific flaws or oversights in a piece of software that allow attackers to do something malicious
examples of malicious actions from an attacker expose or alter sensitive information, disrupt or destroy a system, or take control of a computer system or program.
software bugs they are errors, mistakes, or oversights in programs that result in unexpected and typically undesirable behavior.
What common issue has caused almost every computer user to lose an important piece of work? A software bug.
What is the structural relationship between software vulnerabilities and software bugs? Software vulnerabilities r a subset of software bugs. Bugs: Broad category of errors/flaws/faults n software Vulnerabilities:Specific bugs can be exploited to compromise security.Rule: All vulnerabilities are bugs, but not all bugs are vulnerabilities.
What are security vulnerabilities? Software bugs that a malicious user can leverage to launch attacks against the software and supporting systems.
What is the relationship between security vulnerabilities and software bugs? Almost all security vulnerabilities are software bugs, but only some software bugs turn out to be security vulnerabilities.
What transforms a standard software bug into a security issue? It must have a security-relevant impact. This means it allows attackers to do something they normally cannot do.
What common mistake do people make when labeling a major security flaw? Mischaracterizing it as an innocuous bug.
What common saying draws a useful comparison between software security and reliability? "Security is a subset of reliability." Context: While not a universal truth, it means a reliable program is generally free of software bugs.
What is the core connection and comparison made between software security and reliability? Security is often called a subset of reliability. Reliable programs: Free of bugs, rarely fail, and handle exceptional conditions gracefully. Defensive writing: Both concepts require code that survives uncertain environments and malformed inputs.
How is a secure program similar to a robust program? It can repel focused attacks from intruders. Intruders try to manipulate its environment and input. They do this to achieve a nefarious end.
What common goal do software security and software reliability share? Exterminating software bugs.Both fields require development strategies focused on eliminating bugs to achieve their goals.
Why don't all security vulnerabilities cleanly map to the definition of a software bug? Some vulnerabilities occur when a program operates exactly as designed but still creates a security risk. Example:prog allows access2critical sys files according2its specs .Result: It is technically not a bug, but it is still a security vulnerability.
What is the process of attacking a vulnerability in a program called? Exploiting.
What are three ways an attacker can exploit a software vulnerability? Clever execution: Running the program in an unexpected or clever way. Environment manipulation: Altering or monitoring the program's environment during execution. Intended use: Utilizing an inherently insecure program exactly for its designed purpose.
What is an attacking program or script called when attackers use it to perform an external attack? An exploit or exploit script.
Created by: user-1830624
Popular Computers sets

 

 



Voices

Use these flashcards to help memorize information. Look at the large card and try to recall what is on the other side. Then click the card to flip it. If you knew the answer, click the green Know box. Otherwise, click the red Don't know box.

When you've placed seven or more cards in the Don't know box, click "retry" to try those cards again.

If you've accidentally put the card in the wrong box, just click on the card to take it out of the box.

You can also use your keyboard to move the cards as follows:

If you are logged in to your account, this website will remember which cards you know and don't know so that they are in the same box the next time you log in.

When you need a break, try one of the other activities listed below the flashcards like Matching, Snowman, or Hungry Bug. Although it may feel like you're playing a game, your brain is still making more connections with the information to help you out.

To see how well you know the information, try the Quiz or Test activity.

Pass complete!
"Know" box contains:
Time elapsed:
Retries:
restart all cards