Information Assurance - 5

Question 1

It allows attackers to insert malicious inputs into an application or relay malicious code through an application to another system.

Answer 1

INJECTION ATTACKS

Question 2

• an open-source Expression Language (EL) for Java objects
• enables the evaluation of EL expressions in Apache Struts, which is the commonly used development framework for Java-based web applications in enterprise environments.

Answer 2

OGNL INJECTION

Question 3

Injection is involved in four prevalent attack types

Answer 3

1. OGNL injection,
2. Expression Language Injection,
3. command injection,
4. SQL injection

Question 4

has the ability to create or change executable code, it is also capable of introducing critical security flaws to any framework that uses it.

Answer 4

OGNL INJECTION

Question 5

very serious server-side vulnerabilities, as they can lead to complete compromise of the application’s data and functionality, as well as the server that is hosting the application. Expression Language Injection attacks can also use the server as a platform for further attacks against other systems.

Answer 5

EXPRESSION LANGUAGE INJECTION

Question 6

• the goal is to hijack a vulnerable application in order to execute arbitrary commands on the host operating system.
• made possible when an application passes unsafe user-supplied data (forms, cookies, HTTP headers, etc.) to a system shell. In this attack, the attacker-supplied operating system commands are usually executed with the privileges of the vulnerable application.

Answer 6

COMMAND INJECTION

Question 7

most often found in older, legacy code, such as CGI scripts. By identifying a critical vulnerability, attackers can insert malicious code in an application, gaining functionality and ultimately executing specific commands that infect the targeted user and system networks.

Answer 7

COMMAND INJECTION

Question 8

attack consists of an insertion or injection of a SQL query via the input data from the client to the application.

Answer 8

SQL INJECTION

Question 9

exploit can read sensitive data from the database, modify database data (viz., insert, update, or delete), execute administrative operations on the database

Answer 9

SQL INJECTION

Question 10

a type of cyberattack conducted by a threat actor (or cyber spy) who accesses, steals, or exposes classified data or intellectual property (IP) with malicious intent, in order to gain an economic, political, or competitive advantage in a corporate or government setting.

Answer 10

CYBER ESPIONAGE

Question 10

malicious theft of data, information, or intellectual property from and/or through computer systems

Answer 10

Cyber espionage

Question 11

METHODS OF ESPIONAGE ATTACKS

Answer 11

1. social engineering,
2. malware distribution,
3. advanced persistent threat (APT),
4. watering hole attacks,
5. spear phishing

Question 12

TYPES OF ESPIONAGE ATTACKS

Answer 12

1. ZERO-DAY EXPLOITS
2. WATERING HOLE ATTACKS
3. PHISHING ATTACKS
4. ADVANCED PERSISTENT THREATS (APTS)
5. SUPPLY CHAIN ATTACKS

Question 13

Attackers may exploit previously unknown vulnerabilities (zero-days) in software or hardware to gain unauthorized access to systems for espionage purposes.

Answer 13

ZERO-DAY EXPLOITS

Question 14

• long-term targeted attacks aimed at high-value targets, such as government agencies, defense contractors, or large corporations.
• These attacks often involve sophisticated techniques to gain persistent access to systems and exfiltrate sensitive data over an extended period.

Answer 14

ADVANCED PERSISTENT
THREATS (APTS)

Question 14

In this type of attack, cyber spies compromise websites frequently visited by their targets, infecting them with malware. When the targets visit these sites, their devices become infected, allowing the attackers to gather information.

Answer 14

WATERING HOLE ATTACKS

Question 15

Cyber spies may use phishing emails to trick individuals into revealing sensitive information such as login credentials or downloading malware onto their systems.

Answer 15

PHISHING ATTACKS

Question 16

may target the supply chain of a company, compromising vendors or third-party services to gain access to their ultimate target’s network or data.

Answer 16

SUPPLY CHAIN ATTACKS

Question 17

TARGETS
OF
CYBER ESPIONAGE

Answer 17

1. INTERNAL INFORMATION OF THE COMPANY
2. INTELLECTUAL INFORMATION
3. INFORMATION ON CLIENT AND CUSTOMER
4. INTELLIGENCE CONCERNING MARKET AND COMPETITORS
   5.

Question 18

sensitive information held privately by an agency or organization for internal operational purposes. Some examples are operational data, research and development data, and salaries.

Answer 18

INTERNAL INFORMATION OF THE COMPANY

Question 19

target data related to proprietary formulas, secret projects, internal plans, or any other kind of private information related to projects and development. Really, it includes anything the attacker might be able to sell or profit from.

Answer 19

INTELLECTUAL INFORMATION

Question 20

Data related to the marketing and services directed at the company’s customers is another kind of information cyber espionage operations target. It might include a list of clients, what services are provided, and at what cost.

Answer 20

INFORMATION ON CLIENT AND CUSTOMER

Question 21

Another target of a cyber spying attack can be data regarding the marketing goals of an organization, as well as the knowledge it has obtained about its competitors, exposing the business to unfair market conditions.

Answer 21

INTELLIGENCE CONCERNING MARKET AND COMPETITORS

Question 22

HOW TO PREVENT
CYBER ESPIONAGE

Answer 22

1. CHECK ACCESS TO DATA POLICY
2. SUPPORT BYOD
3. MONITOR UNEXPECTED BEHAVIOR
4. PROTECT CRITICAL INFRASTRUCTURE

Question 23

Monitor access to sensitive, critical information. Often, data is easily available and accessible on the network to all users. Reviewing the organization’s policy and determining who needs access to what is the first step in protecting sensitive data

Answer 23

CHECK ACCESS TO DATA POLICY

Question 24

relatively inexpensive solution, but to avoid the risks that can be incurred, management and maintenance software must be installed. Use a device control mechanism to restrict Universal Serial Bus (USB) devices and encrypt data. This prevents intentional or unintentional data leakage.

Answer 24

SUPPORT BYOD (BRING YOUR OWN DEVICE)

Question 25

Configure firewalls and alerts to recognize normal behavior within the organization and to generate alerts for unexpected or abnormal behavior. As an example, most email leaks caused by malware can be prevented with minimal configuration to the firewall.

Answer 25

MONITOR UNEXPECTED BEHAVIOR

Question 26

One option available is to create multiple networks, one for intellectual property and another for corporate use. Then, only allow users to access the network they need. Additionally, determine what parts of each network must be accessed by each individual, and create policies to provide users with the necessary permissions.

Answer 26

PROTECT CRITICAL INFRASTRUCTURE