Chapter 7: Protecting Against Advanced Attacks

Question 1

Secure Sockets Layer Stripping

Answer 1

Changes HTTPS connection to HTTP
HTTPS uses TLS instead of SSL

Question 2

ARP Poisoning Attacks

Answer 2

Misleads computers or switches about the actual MAC address of a system

Question 3

Memory leak

Answer 3

A bug that reserves memory for the short term but never releases it

Question 4

Buffer Overflow

Answer 4

An application receives more or different data than it expected

Question 5

Integer Overflow

Answer 5

An application receives a numeric value that is too big for the application to handle

Question 6

Directory Traversal

Answer 6

Attempts to access a file by including the full path or traversing the directory structure on a computer

Question 7

Cross-Site Request Forgery

Answer 7

XSRF or CSRF
The user is tricked into performing an action on a website
The attacker creates a specific link

Question 8

Reflected XSS or non-persistent

Answer 8

Malicious email encouraging user to click it
The user sends malware to server

Question 9

Stored XSS or persistent

Answer 9

Malicious code is stored in a database or other location trusted by the web app