CISSP Attacks

Printable Flash Cards
1 of 9
http://www.flashcardmachine.com/print/?topic_id=2854336
Term 1
Definition 1
Birthday attack
Cryptographic attack that exploits the

mathematics behind the birthday
problem in the probability theory
forces collisions within hashing
functions.
Term 2
Definition 2
Brute force attacks
continually tries different inputs to

achieve a predefined goal. Brute force
is defined as trying every possible
combination until the correct one is
identified".
Term 3
Definition 3
Buffer overflow
Too much data is put into the buffers

that make up a stack. Common attack
vector used by hackers to run
malicious code on a target system.
23-11-15 11:15 AM
2 of 9
Term 4
Definition 4
cross-site scripting
refers to an attack where a

vulnerability is found on a web site
that allows an attacker to inject
malicious code into a web application
Term 5
Definition 5
Dictionary attacks
Files of thousands of words are

compared to the users password until
a match is found.
Term 6
Definition 6
DNS poisoning
Attacker makes a DNS server resolve a

host name into an incorrect IP address
23-11-15 11:15 AM
3 of 9
Term 7
Definition 7
Fraggle attack
A DDoS attack type on a computer that

floods the target system with a large
amount of UDP echo traffic to IP
broadcast addresses.
Term 8
Definition 8
pharming
redirects a victim to a seemingly

legitimate, yet fake, web site
Term 9
Definition 9
Phishing
type of social engineering with the

goal of obtaining personal
information, credentials, credit card
number, or financial data. The
attackers lure, or fish, for sensitive
data through various different
methods
23-11-15 11:15 AM
4 of 9
Term 10
Definition 10
Ping of Death
A DoS attack type on a computer that

involves sending malformed or
oversized ICMP packets to a target.
Term 11
Definition 11
replay attack
a form of network attack in which a

valid data transmission is maliciously
or fraudulently repeated with the goal
of obtaining unauthorized access.
Term 12
Definition 12
Replay Attack
an attacker capturing the traffic from a

legitimate session and replaying it to
authenticate his session
23-11-15 11:15 AM
5 of 9
Term 13
Definition 13
session hijacking
If an attacker can correctly predict the

TCP sequence numbers that two
systems will use, then she can create
packets containing those numbers
and fool the receiving system into
thinking that the packets are coming
from the authorized sending system.
She can then take over the TCP
connection between the two systems.
Term 14
Definition 14
Side-channel attacks
Nonintrusive and are used to uncover

sensitive information about how a
component works, without trying to
compromise any type of flaw or
Weakness. A noninvasive attack is
one in which the attacker watches
how something works and how it
reacts in different situations instead of
trying to invade it with more
intrusive measures.
Term 15
Definition 15
Smurf attack
A DDoS attack type on a computer that

floods the target system with spoofed
broadcast ICMP packets.
23-11-15 11:15 AM
6 of 9
Term 16
Definition 16
Social engineering
An attacker falsely convinces an

individual that she has the necessary
authorization to access specific
resources.
Term 17
Definition 17
Spoofing at Logon
attacker can use a program that

presents to the user a fake logon
screen, which often tricks the user
into attempting to log on
Term 18
Definition 18
SQL injection
instead of valid input, the attacker

puts actual database commands into
the input fields, which are then parsed
and run by the application
23-11-15 11:15 AM
7 of 9
Term 19
Definition 19
SYN flood
DoS attack where an attacker sends a

succession of SYN packets with the
goal of overwhelming the victim
system so that it is unresponsive to
legitimate traffic.
Term 20
Definition 20
Time-of-check/time-of-use (TOC/TOU)
attack
Attacker manipulates the condition

check step and the use step within
software to allow for unauthorized
activity.
Term 21
Definition 21
war dialing
the war dialer inserts a long list of

phone numbers into a war dialing
program in hopes of finding a modem
that can be exploited to gain
unauthorized access.
23-11-15 11:15 AM
8 of 9
Term 22
Definition 22
Wormhole attack
This takes place when an attacker

captures packets at one location in the
network and tunnels them to another
location in the network for a second
attacker to use against a target
system.
Term 23
Definition 23
Denial-Of-Service (Dos) Attack
An attacker sends multiple service

requests to the victims computer until
they eventually overwhelm the system,
causing it to freeze, reboot, and
ultimately not be able to carry out
regular tasks.
Term 24
Definition 24
Man-In-The-Middle Attack
An intruder injects herself into an

ongoing dialog between two
computers so she can intercept and
read messages being passed back and
forth. These attacks can be countered
with digital signatures and mutual
authentication techniques.
23-11-15 11:15 AM
9 of 9
Term 25
Definition 25
Mail Bombing
This is an attack used to overwhelm

mail servers and clients with
unrequested e-mails. Using e-mail
filtering and properly configuring
e-mail relay functionality on mail
servers can be used to protect against
this type of DoS attack.
Term 26
Definition 26
Teardrop
This attack sends malformed

fragmented packets to a victim. The
victims system usually cannot
reassemble the packets correctly and
freezes as a result. Countermeasures
to this attack are to patch the system
and use ingress filtering to detect
these packet types.
23-11-15 11:15 AM

CISSP Attacks

Transféré par

Informations du document

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

CISSP Attacks

Transféré par

Droits d'auteur :

Formats disponibles

Printable Flash Cards

Cryptographic attack that exploits the

Brute force attacks

continually tries different inputs to

Too much data is put into the buffers

Printable Flash Cards

refers to an attack where a

Files of thousands of words are

Attacker makes a DNS server resolve a

Printable Flash Cards

A DDoS attack type on a computer that

redirects a victim to a seemingly

type of social engineering with the

Printable Flash Cards

A DoS attack type on a computer that

a form of network attack in which a

an attacker capturing the traffic from a

Printable Flash Cards

If an attacker can correctly predict the

Nonintrusive and are used to uncover

A DDoS attack type on a computer that

Printable Flash Cards

An attacker falsely convinces an

attacker can use a program that

instead of valid input, the attacker

Printable Flash Cards

DoS attack where an attacker sends a

Attacker manipulates the condition

the war dialer inserts a long list of

Printable Flash Cards

This takes place when an attacker

Denial-Of-Service (Dos) Attack

An attacker sends multiple service

An intruder injects herself into an

Printable Flash Cards

This is an attack used to overwhelm

This attack sends malformed

Vous aimerez peut-être aussi