Quiz 1 Material

Question 1

Security mechanisms typically do not involve more than one particular algorithm or protocol? T/F

Answer 1

False

Question 2

The first step in devising security services and mechanisms is to develop a security policy. T/F

Answer 2

True

Question 3

To exploit any type of buffer overflow the attacker needs to identify a buffer overflow vulnerability in some program that can be triggered using externally sourced data under the attacker’s control. T/F

Answer 3

True

Question 4

Shellcode is not specific to a particular processor architecture T/F

Answer 4

False

Question 5

An attacker can generally determine in advance exactly where the target buffer will be located in the stack frame of the function in which it is defined. T/F

Answer 5

False

Question 6

It is possible to write a compiler tool to check any C program and identify all possible buffer overflow bugs. T/F

Answer 6

False

Question 7

The OpenSSL heartbleed vulnerability would have been prevented if OpenSSL had been implemented in Java (and the Java runtime env works properly). T/F

Answer 7

True

Question 8

ASLR (if implemented correctly) can prevent return-to-libc attacks. T/F

Answer 8

True

Question 9

____ Assures that individuals control or influence what information related to them may be collected and stored and by whom and to whom that information may be disclosed.

Answer 9

Privacy

Question 10

_____ assures that a system performs its intended function in an unimpaired manner, free from deliberate or inadvertent unauthorized manipulation of the system.

Answer 10

System Integrity

Question 11

A loss of _____ is the unauthorized disclosure of information.

Answer 11

Confidentiality

Question 12

A flaw or weakness in a system’s design, implementation, or operation and management that could be exploited to violate the system’s security policy is a(n) _____.

Answer 12

Vulnerability

Question 13

An assault on system security that derives from an intelligent act that is a deliberate attack to evade security services and violate the security policy of a system is a(n) ____.

Answer 13

attack

Question 14

A(n) ____ is an action, device, procedure, or technique that reduces a threat, a vulnerability, or an attack by eliminating or preventing it, by minimizing the harm it can cause , or by discovering and reporting it so that correct action can be taken.

Answer 14

Countermeasure

Question 15

An example of ___ is an attempt by an unauthorized user to gain access to a system by posing as an authorized user.

Answer 15

Masquerade

Question 16

The assurance that data received are exactly as sent by an authorized entity is ____.

Answer 16

Data Integrity

Question 17

A consequence of buffer overflow error is ____.

Answer 17

1. Corruption of data used by the program
2. Unexpected transfer of control in the program.
3. Possible memory access violation

Question 18

The function of _____ was to transfer control to a user command-line interpreter, which gave access to any program available on the system with the privileges of the attacked program

Answer 18

Shell code

Question 19

Forms of buffer overflow attacks

Answer 19

1. Heap overflows
2. Return to system call
3. Replacement stack frame

Question 20

A buffer can be located where?

Answer 20

1. In the heap
2. On the stack
3. In the data section of the process.

Question 21

Data breaches violate which of the following security requirements?
a. Integrity
b. Availability
C. Confidentiality

Answer 21

C. Confidentiality

Question 22

Any attempt to pass data of incompatible type is caught at compile time or generates an error at runtime. Weak or strongly typed?

Answer 22

Strongly

Question 23

An array index operation b[k] may be allowed even though k is outside the range of the array. strongly or weakly typed?

Answer 23

weakly

Question 24

It is impossible to do “pointer arithmetic” to access arbitrary area of memory. Strongly or weakly?

Answer 24

strongly.

Question 25

ASLR

Answer 25

Address Space Layout Randomization randomizes stack, heap, libc, etc. This makes it harder for an attacker to locate important addresses

Question 26

Do stack canaries prevent return-to-libc buffer overflow attacks?

Answer 26

Yes

Question 27

Does ASLR protect against read-only buffer overflow attacks?

Answer 27

No

Question 28

Can the Open SSL heartbleed vulnerability be avoided with a non-executable ttack?

Answer 28

No