Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
Malicious activity
| Question | Answer |
|---|---|
| Denial of Service (DoS) | Used to describe an attack that attempts to make a computer or servers resources unavailable |
| Flood attack | Specialized type of DoS, which attempts to send more packets to a single server or host |
| Ping flood | A variety of flood attack in which a server is sent with too many pings (ICMP echo) |
| SYN Flood | Attacker will initiate multiple TCP sessions, but never complete the three-way handshake |
| Permanent denial of service (PDos) | An attack which exploits a security flaw by reflashing a firmware, permanently breaking networking device |
| Fork bomb | A large number of processes is created to use up a computers available processing power |
| distributed denial of service (DDoS) | More machines are used to launch an attack simultaneously against a single server to create denial of service condition |
| DNS amplification attack | Specialized DDoS that allows an attacker to initiate DNS request from a spoof IP address to flood a website |
| domain name system (DNS) | Responsible for a translating human friendly domain names into IP addresses, that computers can understand |
| DNS cache poisoning | Involves corrupting the DNS cache data of a DNS resolver with false information |
| DNS amplification attack | The attacker overloads a target system with DNS response traffic by exploring the DNS resolution process |
| DNS Tunneling | Uses DNS protocol over report 53 to encase non-DNS traffic, trying to evade firewall rules for command control or data exfiltration |
| domain hijacking | Altering a domain names registration without the original registrar consent |
| DNS zone transfer attack | Attacker mimics an authorized system to request and obtain the entire DNS zone data for a domain |
| directory traversal | A type of injection attack that allows access to commands, files, and directories, either connected to web document root directory or not |
| file inclusion | Allows an attacker to either download files from an arbitrary location or upload an executable or script file to open a backdoor |
| Remote file inclusion | Occurs when an attacker tries to execute a script to inject a remote file |
| local file inclusion | Occurs when an attacker tries to add a file the already exist |
| arbitrary code execution | A vulnerability that allows an attacker to run a code or module that exploits a vulnerability |
| remote code execution | A type of arbitrary code execution that allows an attacker to transmit code from a remote host |
| Privilege escalation | Occurs when a user access or modifies specific resources that they are not entitled to normally access |
| vertical privilege escalation | From normal level User to higher level |
| horizontal privilege escalation | From one User to another or generally the same level |
| rootkit | A class of malware that modifies system files, often at the colonel level, to conceal its presence |
| replay attack | Type of network-based attack that involves maliciously repeating or delaying valid data transmissions. Attacker intercepts data and decides whether to retransmit it later |
| session hijack | attacker alters real-time data transmissions. A type of spoofing attack where the host is disconnected and replaced by the attacker |
| session tokens | Unique data pieces that prevent session replay by attackers |
| session management | A fundamental security concept that enables web applications to identify a user |
| session prediction | An attacker attempts to predict the session token into hijack that session |
| cookie poisoning | Modifying the contents of a cookie to be sent to a clients browser and exploit the vulnerabilities in an application |
| on path attack | An attack where the penetration tester puts the workstation logically between two hosts during the communication |
| relay | Occurs when attackers insert themselves in between two hosts and become part of the conversation |
| SSL Stripping | Tricking the encryption application with an HTTP connection instead of an HTTPS connection |
| downgrade attack | Occurs when an attacker attempts to have a client or server abandon its higher security mode |
| lightweight directory Access protocol (LDAP) | A protocol for access and maintenance of distributed directory information services |
| LDAP injection | An attack in which LDAP statements, typically created by user input, are fabricated |
| command injection | A threat actor is able to execute arbitrary shell commands via a vulnerable web application |
| process injection | A method of executing arbitrary code in the address space of a separate live process |
| indicators of compromise (IoC) | Data pieces that detect potential malicious activity on a network or system |
| account lockout | Signal a compromise when it's triggered by numerous failed login attempts |
| concurrent session usage | One user having multiple active sessions |
| Block content | When users try to access or download content that security measures have prevented |
| Impossible travel | When suspicious logins occur from distant locations in a timeframe that makes physical travel between them impossible |
| resource consumption | Unusual resource spikes can cause a compromise |
| resource inaccessibility | Inability to access certain resources, such as files, databases, or network services |
| out-of-cycle logging | Logging events happening at odd times when no one is supposed to be active |
| Missing Logs | Attackers delete logs to cover their tracks and hinder investigations |
| articles or documents on security breach | Attackers may publicly announce their hacks to brag about their abilities or harm the organizations reputation |
Created by:
user-2044395