Sec + 2 Flashcards
(35 cards)
Secure enclave
Hardware security features in modern processors that provide a separate and isolated environment for secure operations like storing sensitive data and executing cryptographic operations.
What is a crl?
Certificate revocation lists
What is a ocsp?
Online certificate status protocol
What is an apt?
Advanced persisted threat
What is operational capacity?
Money and resources of attackers
What is a ssid?
Service set identifier, network name
What is a pan?
Personal area network, Bluetooth
How to fight memory injection of apps?
Code signing, input validation, memory protections.
How to prevent buffer overflow?
Input validation, proper memory management, programming languages with built-in safeguards
What are race conditions?
When two instructions from separate threads try to access data at same time, theoretically the 1st person can manipulate the data of 2nd person
What are some hardware vulnerabilities?
Outdated firmware, inadequate security programming, bad encryption.
What is a vm escape?
Moving from vm to a host
What is risk of shared tenancy and where is it relevant?
Share resources in the cloud where leaks from one user can effect the whole.
What is a ssl/test downgrade?
Ssl traffic is intercepted and tricked into thinking it is going to a older/ less secure browser so it switches to a weaker encryption method.
What is jailbreaking?
On apple devices. Unlocking.
What is rooting?
Android jailbreaking.
What is side loading?
Downloading unsupported apps.
How does Spyware work?
With cookies.
What is rfid?
Radio frequency id cloning. Copying signals from key cards or badges.
How to do a syn flood attack?
Flood computer with syn requests that are never answered
What is an amplified attack? What is an example?
Sending small requests that trigger a big response.
Smurf attack-arracker sends a large number of icmp requests to an intermediate device, like a router, 4 each request, there are 4 replies. Made to look like they came from a victims ip address clogging it up.
What is icmp?
Internet control message protocol. A ping
What is arp? Where in osi does it work?
Address resolution protocol. Maps ip addresses to mac addresses.
Layer 2
