5.3 cyber security Flashcards
(36 cards)
1
Q
process of brute-force attack
A
- hacker systematically try
- all diff combos of letters, numbers, symbols
- until eventually find password
2
Q
aim of carrying out brute-force attack
A
figure out passwork
3
Q
process of data interception
A
- steal data by tapping into wired/wireless communication link
- wardriving (wireless)
- packet sniffing (wired)
4
Q
aim of data interception
A
- compromise privacy
- obtain confidential information
5
Q
explain wardriving
A
locating and using wireless internet connections illegally
6
Q
explain packet sniffing
A
- uses packet sniffers
- examine packets sent over a line
- all data collected sent back to attacker
7
Q
process of DDoS attack
A
- flood network with useless spam traffic
- server can only handle finite number of requests
- so server fails as result, struggles to respond to all requests
8
Q
explain how the spam traffic works in DDoS attack
A
- originates from many diff comptuers (hard to block traffic)
- network of computers infected with malware called bots
- send multiple requests to access web server all at same time
- while bot not being used, called zombie
9
Q
aim of DDoS attack
A
- prevent users from accessing part of network
- notably, internet server
10
Q
process of hacking
A
gaining unauthorised access to computer system
11
Q
aim of hacking
A
- gain personal info
- data change, corrupt, passed on
12
Q
types of malware
A
- virus
- ransomware
- adware
- trojan horse
- spyware
- worms
13
Q
explain virus
A
- programs that can replicate themselves
- delete or corrupt files
- cause computer to malfunction
- need active host program on target computer before can actually run and cause harm (need to be executed by trigger)
14
Q
explain ransomware
A
- attackers encrypt users data
- until certain amount of money paid
- then, decryption key sent to user
15
Q
explain adware
A
display unwanted ads on user screen
16
Q
explain trojan horse
A
- program disguised as legitimate software
- used to invite other malware, often installed via trojan horse malware
17
Q
explain spyware
A
- software that gathers info by monitoring user activity on computer
- send back to cybercriminal who originally sent spyware
- include web browsing activities, personal data
18
Q
explain worms
A
- programs that can replicate themselves
- intention of corrupting entire network instead of computer alone
- no need for active host program
19
Q
process of pharming
A
- attacker install malicious code on computer
- redirects user to fake websites
20
Q
process of phishing
A
- attackers send legitimate-looking emails
- bait user into giving out info
21
Q
process of social engineering
A
- attacker creates social situation
- leads to victim giving out details
22
Q
what is malware
A
malicious software
23
Q
aim of pharming
A
give login details and other personal details
24
Q
aim of phishing
A
give out personal information
25
aim of social engineering
give out personal details
26
how do access levels keep data safe
different level of access for diff people
27
what are the types of anti-malware
anti-virus, anti-spyware
28
features of anti-virus software
- check software/files before run/loaded on computer
- compares possible virus against database of known viruses
- any files/programs potentially infected put into quarantine
29
what does anti-spyware do
detects and removes spyware programs
30
types of authentication
- username and password
- biometric
- two-step verification
31
how does automating software updates help keep data safe
- contain patches that update software security
- improve software performance
32
what are firewalls
- either software or hardware
- sits between user computer and external network
- primary defense against hacking
33
tasks of firewall
- examine traffic between user comp and public network
- log all incoming and outgoing traffic and give user warning if security issue
34
how do proxy servers work
- intermediate between user and web server
- keep user IP address secret
- allow internet traffic to be filtered
- can act as firewalls
35
diagram for proxy server
36
what is SSL
-
