Security Flashcards
What is the purpose of permissions?
To restrict access to files and folders
What mode executes kernal or operating system code?
Supervisor mode
What mode has memory and hardware access?
Supervisor mode
What is the purpose of memory protection?
To prevent programs from overwriting or accessing eachother’s memory
What is the purpose of cryptography?
What is buffer overflow
Exceed the allocated memory space of a buffer
What is data overread
Reading data beyond the bounds of an allocated buffer
Why could data inserted during a buffer overflow get executed as instructions?
CPU and memory treat all addresses equally. Nothing distinguishes between instructions and data in memory aside from how the flow of control is manipulated. If the CPU fetches information in memory intended to be used by the user/program, it will try treat it like an instruction. If the data can decide to an instruction, it will be executed.
What is Arbitrary Code Execution?
The ability to run any code or commands within a system or software, often due to a vulnerability that allows unauthorised or unanticipated code to be executed. This can lead to severe security risks and potential exploitation by attackers.