Web Threats

Question 1

What does SQL Injection stand for and what does it mean?

Answer 1

Structured Query Language Injection, where an attacker can execute malicious SQL statements that control a web application’s database server.

Question 2

What is spoofing?

Answer 2

Where an attacker will create a “shadow copy” of the web by having all victim’s traffic go through their machine.

Question 3

What is pharming?

Answer 3

A scamming practice which involves a code redirecting users to another website - this could be a virus on the DNS server.

Question 4

What is phishing?

Answer 4

A server crime where targets are either emailed or phoned.

Question 5

What is spyware?

Answer 5

Enables a user to obtain covert information about another’s computer activities by transmitting data covertly from their hard drive.

Question 6

What is MITB or MITM?

Answer 6

A cybercriminal who will intercept and/or manipulate data sent between users.

Question 7

What is key logging?

Answer 7

A software which records key presses.

Question 8

What is cross-site request forgery?

Answer 8

Attackers use phishing-type techniques to request actions from unsuspecting users.