Session 10: Vulnerabilities

Question 1

Types of vulnerabilities?

Answer 1

1. Hardware Vulnerabilities
2. Software Vulnerabilities
3. Data Vulnerabilities

Question 2

Hardware vulnerabilities?

Answer 2

1. Processor Vulnerabilities
   * Speculative Execution Attacks
   * Side Channel attacks
2. Firmware vulnerabilities
3. Peripheral Device Vulnerabilities
4. Embedded System and IoT Devices vulnerabilities
5. Supply Chain Attacks

Question 3

Software Vulnerabilities?

Answer 3

1. SQL Injection
2. Cross Site Scripting
3. Broken authentication and Session management
4. Insecure direct object reference
5. Cross site request forgery
6. Security misconfiguration
7. Insecure cryptographic storage
8. Failure to restrict URL access
9. Insufficient transport layer protection
10. Invalidated Redirects and Forwards

Question 4

Data vulnerabilities?

Answer 4

1. Insufficient encryption
2. Weak authentication and access control
3. Insecure storage practices
4. Data leakage
5. Lack of data backup and recovery
6. Third party risks