Week 1 - Other Attacks Flashcards
What is an injection attack?
An attacker injects malicious code into your system
What does XSS stand for?
Cross-Site Scripting (attacks)
What kind of attack is XSS attacks?
an injection attack where the attacker inserts malicious code to target the user of a service
(malicious script in a web browser executed by a user, steals cookies and log-in info)
What kind of attack is a SQL injection attack?
targets the entire website if the website is using a SQL database. Allows them to delete website data, copy it and run malicious commands.
(unlike XSS that targets a user)
What is a brute force attack?
It’s a password attack that continuously tries different combinations of characters and letters to get access
What’s a dictionary attack?
Similar to a brute force attack, instead of random characters it uses commonly used word passwords
(like monkey, football, password)
What is a social engineering attack?
an attack method that relies on interactions with humans to carry out (tricking a person into giving out info)
When does a phishing attack usually occur?
When a malicious email is sent to a victim with a malicious link to click on
How is spear phishing different from regular phishing attacks?
Spear phishing targets specific individuals or groups (contain personal information)
What is spoofing?
A source trying to pass off as something else (masquerading as your friend’s email address)
What is baiting?
an offline attack that is used to entice a victim into doing something
(like leaving a malicious USB drive lying around)
What is tailgating?
an offline attack where the attacker gains access into a restricted area by following a real employee in or impersonate a worker
