Chapter 10: Cybersecurity Flashcards

Question

How do firewalls work?

Answer 1

When the traffic passes through a firewall, it is inspected to see if it meets certain criteria. 1) if it does -> it is allowed through 2) if it doesn’t-> it is blocked How is traffic filtered? 1) the type of network traffic 2) source address 3) attributes of the address

Answer 2

Malicious Software. Basically, designed to steal data and cause damage to computers and computer systems, eg networks and servers.

Answer 3

Client firewalls are software that run on an end user’s computer, and only protect the computer on which it is running Whereas network firewalls are installed on the boundary between 2 networks and protect the whole organisation

Answer 4

Some of the viruses include code that encrypts the virus so that the “signature” of the virus is different

Answer 5

Unlike computer viruses, worms are programs that replicate itself for the sole purpose of consuming bandwidth, which is the rate of transfer of data

Answer 6

A program which is designed to replicate itself and is often transmitted via unremovable secondary storage devices such as USB Thumb drives, and portable hard drives

Answer 7

They are viruses that are disguised as another software package that performs a different purpose

Answer 8

[+] It can install a “spambot” [+] It can install software that allows the user of the trojan to get access to the infected computer [+] Install pop-up advertisements can turn computer into a zombie [+] Can delete files the same way a virus does [-] A trojan does not replicate itself well, as it relies on the user to download or distribute the program.

Answer 9

A malicious attempt to disrupt the normal traffic of a targeted server/network by flooding it with an overload of traffic.

Answer 10

Changing your IP, which takes time. However, When you change your IP, the hacker can just redirect the attack to the new IP Address.

Answer 11

Zombies which are apart of the ‘botnet’. These zombies are instructed to send Internet protocol (IP) requests to a targeted web server. The sheer amount of requests is too much to handle.

Answer 12

Type of malware which is concerned with the collection of information, often delivered as a payload, alongside a worm or a trojan

Answer 13

Subset of spyware, will display popup ads frequently, and these ads are a source of income for the owner

Answer 14

Structured Query Language, designed to extract, add, delete or edit records in a database

Answer 15

In a login system taking direct input from the user and placing it in a SQL command can be a concern, as the user has the ability to INJECT their own code into the query. They can simply add an “or” statement, which makes the whole statement ALWAYS TRUE, such as fkrmgkmgrkw, “or” 1=1”. This gives the user access to the entire database

Answer 16

Gathering or collecting data that passes through a network by intercepting and reading it.

Answer 17

Simply by validating the user input prior to inserting them into the SQL string as parameters, which prevents the users to directly write code into the input

Answer 18

Public unsecured “open” connections may be sourced via a router which is protected by a firewall, you are not protected from the people close by to you. Because data sent over an unsecured network is NOT ENCRYPTED, any data that you send or receive can be packet sniffed, or intercepted.

Answer 19

Gaining access to a user’s data by inserting themselves in the middle of the communication that the user is having with the information system they are connected with (EAVESDROPPING)

Answer 20

1) Network discovery, by turning network discovery off, meaning that your computer will not be seen on the network 2) Disabling all means of sharing files and resources which are usually open by default 3) Using https instead of http when entering sensitive informationin sites, as https use an established encrypted connection to protect the data 4) Using ur own personal firewall 5) Connecting to a Virtual Private Network (VPN), as it is encrypted.

Answer 21

Good for sending a large amount of information

Answer 22

Encoding information so that it is unreadable.

Answer 23

The “plaintext” version of the data is encrypted using a “secret” key and then sent to the recipient who then needs to decrypt it using the same key. The problem with this is sending the secret key to the recipient without it being intercepted easily (securely)

Answer 24

1) If someone wants to send information to someone else, they must first request a copy of the public key 2) This enables them to encrypt the information and send it 3) When the information is received, the owner of the both the public and private key is able to decrypt the info using the private key keep in mind that public keys can be sent to anyone who wishes to send information to you But only you should have access to your private key

Answer 25

Uses 2 keys, 1 public and 1 private key. The public key can only be used to encrypt information The private key can only be used to decrypt the information

Answer 26

Works well but is not good for large amounts of information and is slow.

Answer 27

Technology that keeps an internet connection secure, using encryption to protect the data being sent between 2 systems Is a common application of ASYMMETRIC key encryption, which establishes a “handshake” between a web server and a web browser, by making sure that any data that is transferred impossible to read. TSL is just the more advanced version of SSL.