SON 4 Flashcards
How do attackers use memory injection, and how can it be prevented?
🔹 Memory Injection – Injecting malicious code into a program’s memory.
🔹 Common Techniques – Code injection, buffer overflows, DLL injection.
🔹 Goal – Execute arbitrary code by exploiting vulnerabilities.
🔹 Prevention – Secure coding, input validation.
What is a race condition, and how does TOCTOU exploitation work?
🔹 Race Condition – Timing issue where attackers exploit changes in a system’s state.
🔹 TOCTOU (Time-of-Check to Time-of-Use) – A resource is checked, then altered before use.
🔹 Example – File access attacks using symbolic links to bypass security.
🔹 Prevention – Use atomic operations & proper synchronization.
How can malicious updates compromise security, and how are they prevented?
🔹 Malicious Update – Fake update that weakens system security.
🔹 Goal – Trick users into installing compromised software.
🔹 Prevention – Use code signing to verify legitimate updates.
Why are outdated operating systems (EOL- End of Life) a security risk?
🔹 OS Weaknesses – Can allow unauthorized access or privilege escalation.
🔹 Fix – Regular OS updates & patches.
🔹 Risk – Unsupported OS (e.g., Windows XP, 7) gets no security updates.
How does SQL injection exploit the connection between front-end inputs and the back-end database?
Flashcard: SQL Injection (SQLi)
🔹 SQLi Attack – Injecting malicious SQL code into input fields.
🔹 How it works – Exploits poorly validated inputs in a website’s front-end to manipulate the database (back-end).
🔹 Common goal – Bypass authentication, steal or delete data, or modify records.
🔹 Example – Entering ‘ OR 1=1 – in a login field tricks the database into always returning “true,” granting access.
🔹 Prevention – Use prepared statements, parameterized queries, and input validation.
How does XSS allow attackers to manipulate web applications and users?
🔹 XSS Attack – Injecting malicious scripts into web pages.
🔹 How it works – Exploits unvalidated user input to run scripts in other users’ browsers.
🔹 Common goal – Steal cookies, hijack sessions, or deface webpages.
🔹 Example – Inserting
alert('Hacked!') into a comment box executes unwanted code.🔹 Prevention – Input validation, output encoding, and Content Security Policy (CSP).
Why are outdated or unsupported hardware devices a security risk?
🔹 Firmware Vulnerabilities – Weaknesses in low-level software running on devices.
🔹 End-of-Life Hardware – Unsupported devices with no security updates.
🔹 Legacy Hardware – Old devices that lack modern security protections.
What are common security risks in virtualization?
🔹 VM Escape – Attacker breaks out of a virtual machine to access the host system.
🔹 Resource Reuse – Sensitive data left in system resources can be accessed by other processes.
How can weak access controls and account hijacking compromise cloud security?
🔹 Data Breaches – Sensitive cloud data is a prime target for hackers.
🔹 Weak Access Controls – Poor authentication & credential management lead to unauthorized access.
🔹 Account Hijacking – Stolen cloud accounts allow attackers to manipulate data and intercept transactions.
Why are APIs and system vulnerabilities major risks in cloud security?
🔹 Insecure APIs – Poorly secured cloud interfaces can be exploited.
🔹 System Vulnerabilities – Complex cloud infrastructures may contain exploitable weaknesses.
