Threats, Vulnerabilities, Mitigation 4

Question 1

What is a Logic Bomb?

Answer 1

• Waits for predefined events
• Time Bomb
• Often Hard to recover once it goes off

Mitigation
* Formal change control
* Alerts on changes
* Constand Auditing

Question 2

What is a rootkit?

Answer 2

Hides itself in kernel of the OS
* Makes itself part of the OS
Can be invisible to the OS
* Does not appear in Task manager
Often invisible to traditional anti-virus

Mitigation:
* Rootkit remover tools
* Secure boot with UEFi - secures boot of system and therefore rootkit from running in kernel

Question 3

What are Techniques for Physical Attacks?

Answer 3

• Brute Force
• RFID cloning:
• Underlying technology for Access badges, key fobs
• Environmental Attacks

Question 3

What is DNS Poisioning ?

Answer 3

• Network Attack
• Exploiting Vulnerabilities in DNS infrastructure
• Corrupting DNS cache by injecting false data
• Leads to mapping of Domainname to incorrect IP

Question 4

What is Domain Hijacking?

Answer 4

• Gain Access to Domain registration and control traffic flow

How?
* Brute Force
* Social engineer password
* Gain access to email address that manages account

Question 4

What is Wireless Authentication Attack?

Answer 4

• Wireless deathentication
• Significant DoS attack
• 802.11 frames associated to attack
• Original Wireless Standarts had no protection for management frames: 802.11ac updates included

Question 5

What is Radio Frequency Jamming?

Answer 5

DoS
* Prevents Wireless communication

Deliberate Interference of Wireless communications
* transmitting signals that disrupt normal functioning of devices

Fox hunting
* Attacker needs to be close in order to interfere

Question 6

What is an on-path-attack?

Answer 6

Type of Attack where attacker gains access to communication path between two systems or devices allowing to intercept, modify or disrupt communication flow

• Formerly Man-in-the-middle attack

Example: Arp Poisioning
* Attacker sends falsified ARP messages onto local IP subnet
* ARP has no security associated to it
* Attacker tries to update ARP cache of victim and of router (or other device) with his own Mac Address

Question 7

What is an on-path browser attack?

Answer 7

Middlemen is on same computer as victim and intercepts communication between web browser and internet

• Example: Exploiting Bank account login

Question 8

What are reply attacks?

Answer 8

Attacker intercepts and reuses valid communication between two parties

Pass the Hash
* Interception of client and server communication
* Instead os letting victim send his own hashed password, attacker sends his password hash to gain access to server

Mitigation:
Salting, Encryption

Session Hijacking
* Taking over web user session by obtaining session ID and masquerading as legitimate user

How to obtain?

• Using packetcapture to obtain Session ID from header
• XSS
• Modification of headers: Tamper, Firesheep, Scapy