Chapter 12 Testing Infrastructure Flashcards
What are the three areas where vulnerabilities can be found in IT infrastructure?
The three areas where vulnerabilities can be found in IT infrastructure are:
Hardware: Vulnerabilities related to the components and devices used in the infrastructure, such as CPUs, routers, switches, cameras, etc.
Configuration: Weak configurations or misconfigurations in the infrastructure’s settings and parameters, which can leave it vulnerable to attacks or unauthorized access.
Management: Vulnerabilities arising from weaknesses in the management practices of the infrastructure, including insufficient user training, poor security awareness, and inadequate policies and controls.
What is social engineering?
Social engineering is a technique used by attackers to manipulate and deceive people in order to gain unauthorized access to information or systems. It involves exploiting human psychology, trust, and helpfulness to trick individuals into revealing sensitive information, performing certain actions, or bypassing security measures.
What is adversarial artificial intelligence?
Adversarial artificial intelligence refers to the use of AI by malicious actors to launch attacks or exploit vulnerabilities. It involves leveraging AI techniques and algorithms to develop and deploy sophisticated and automated attack methods, making it challenging for traditional security measures to detect and mitigate them effectively.
What is a vulnerability assessment?
A vulnerability assessment is a systematic process of identifying and assessing vulnerabilities in an IT infrastructure. It involves using tools and techniques to scan and analyze the infrastructure for potential weaknesses, misconfigurations, or security flaws. The purpose of a vulnerability assessment is to discover and prioritize vulnerabilities so that appropriate measures can be taken to mitigate them.
What is a penetration test (pen test)?
A penetration test, also known as a pen test, is a controlled and simulated attack on an IT infrastructure to identify and exploit vulnerabilities. It involves authorized security professionals, known as penetration testers, attempting to breach the system’s defenses to uncover weaknesses and provide recommendations for improvement. Pen tests are conducted from an external perspective (external pen test) or an internal perspective (internal pen test) to evaluate the security posture of an organization’s infrastructure.
What is social engineering?
Social engineering is a deceptive technique used by attackers to manipulate and trick individuals into divulging sensitive information or performing actions that can compromise security.
How does social engineering work?
Social engineering works by exploiting human psychology, trust, and familiarity to create believable stories or pretexts that deceive victims into disclosing sensitive information or taking certain actions.
What are some examples of social engineering attacks?
Examples of social engineering attacks include phishing emails, phone calls from impersonators, in-person interactions with deceptive individuals, and physical methods like dumpster diving or shoulder surfing.
What factors contribute to the success of social engineering attacks?
The success of social engineering attacks relies on factors such as the presence of a believable pretext, trust in authority figures or organizations, and the use of blackmail or extortion tactics.
How can organizations protect themselves against social engineering attacks?
Organizations can protect themselves against social engineering attacks by implementing security awareness training programs, establishing strict policies and procedures, conducting regular vulnerability assessments and penetration tests, and promoting a culture of skepticism and vigilance among employees.
What is dumpster diving?
Dumpster diving is a physical form of social engineering where attackers search through discarded trash or documents to gather information about an organization for reconnaissance purposes or to exploit vulnerabilities.
What is shoulder surfing?
Shoulder surfing is a physical social engineering technique where attackers observe sensitive information by looking over someone’s shoulder, typically in public places or work environments.
What is tailgating?
Tailgating is a physical social engineering technique where attackers gain unauthorized access to secure areas by closely following behind authorized individuals without proper authentication.
Who is Kevin Mitnick, and what services does he offer?
Kevin Mitnick is a renowned hacker turned security consultant. He offers various security consulting services, including social engineering testing, penetration testing, and vulnerability assessments to assess and improve organizations’ security posture.
Why is security awareness important in defending against social engineering attacks?
Security awareness is important because it helps individuals recognize and respond to social engineering attacks. By educating employees about the tactics used in social engineering and promoting a culture of skepticism, organizations can significantly reduce the success rate of such attacks.
What is website redirection in the context of social engineering?
Website redirection is a technique used by malicious actors to redirect users to a fake or malicious website that resembles a legitimate one. This is done to trick users into divulging sensitive information or performing actions that compromise security.
How can attackers perform website redirection?
Attackers can perform website redirection by compromising DNS servers and altering the DNS records to point to a malicious website. They can also infect users’ machines with malware that redirects them when they click on certain links or ads.
What is a watering hole attack?
A watering hole attack is a social engineering attack where attackers target a website or application that is frequently visited by a specific group of users. They exploit vulnerabilities in the site to inject malicious code, which is then executed when users visit the compromised site, leading to potential compromises of their systems.
What is adversarial artificial intelligence (AI)?
Adversarial artificial intelligence refers to the use of AI techniques by attackers to exploit vulnerabilities and launch malicious activities. It involves training AI models to carry out attacks or manipulate data to deceive systems that rely on AI algorithms.
What is spam in the context of social engineering?
Spam refers to unsolicited email messages that are sent to users’ mailboxes. These messages are often used to promote products or services, collect information, or deliver malicious payloads, such as malware or phishing attempts.
