5) Explain two outcomes an attacker may aim for with a Buffer overflow attack. Sketch how and why a Buffer overflow attack works. You do not need to write code but can if it helps you to explain. 6) Explain what a Trojan Horse is. Describe two distinct methods of identifying a Trojan Horse and explain when and why each of those methods might be appropriate. 7) What is a honeypot? What role might it play in the detection and management of intrusions? Give an example to illustrate how particular data within a real system might be considered to be a honeytoken.

5) Explain two outcomes an attacker may aim for with a Buffer overflow attack. Sketch how and why a Buffer overflow attack works. You do not need to write code but can if it helps you to explain. 6) Explain what a Trojan Horse is. Describe two distinct methods of identifying a Trojan Horse and explain when and why each of those methods might be appropriate. 7) What is a honeypot? What role might it play in the detection and management of intrusions? Give an example to illustrate how particular data within a real system might be considered to be a honeytoken.

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

Consider how salt protects passwords in encryption.
Explain the definition of the word "firewall" in terms of network security, as well as how it is employed in different network topologies.
1) Describe the difference(s) between an authenticated user and an authorised user. 2) Describe three distinct types of attacks against password systems. Briefly discuss appropriate countermeasures against one of those types of attacks. 3) Explain two outcomes an attacker may aim for with a Buffer overflow attack. Sketch how and why a Buffer overflow attack works. You do not need to write code but can if it helps you to explain. 4) Explain what salting is, where we use it, and why we use it. 5) Briefly describe how an encrypted virus works. 6) Describe two primary properties used in malware classification and two distinct methods of identifying a virus. 7) Describe how honeypots can be used in an intrusion detection system.
Describe the concept of "VM escape attacks" and the measures that can be taken to prevent them.
Is it feasible for a single person to carry out the planning and execution of a distributed denial of service attack?
Given an NMAP scan on a given target. You are to use open-source information to identify the best possible attack vectors, the exploits to use, and the gains from those exploits. The answer should be 1-3 pages long. . You will also provide at least 1 source for each exploit to back up your argument (MLA Format).
One of the most basic concepts in the field of Information Security is the CIA Triad or CIA Triangle. This was mentioned briefly in Chapter 1 of your text. CIA stands for Confidentiality, Integrity, and Availability. Denial of Service (DoS) attacks challenge the "Availability" of a system or data. This could be temporary (e.g., a SYN Flood Attack that renders a web server unavailable during the attack) or permanent (e.g., the deletion or destruction of the data). The latter of these has become increasingly common in the case of "ransomware" which is malware that encrypts all of the data on an infected system and the administrator is notified that if they don't pay a ransom by a certain date that the key to decrypt the data will be permanently deleted. (NOTE: This is conspicuously absent from the books discussion on malware but is a MAJOR issue right now.) While the temporary attacks may be less destructive, they are often done against systems that generate a lot of money (such…
It's possible that a single individual is behind DDoS attacks, but the mechanics of these attacks are murky at best.
Explain the concept of a distributed denial of service (DDoS) attack in the realm of IT security. What mitigation strategies can be employed?
For the ZeuS malware, please write a short paragraph based on the given background and website info: ZeuS – Trojan ZeuS is a modular banking trojan that uses keystroke logging to compromise credentials when a victim visits certain banking websites. Since the release of the ZeuS source code in 2011, many other malware variants have adopted parts of its codebase, which means that incidents classified as ZeuS may actually be other malware using parts of the original ZeuS code. https://www.cisecurity.org/insights/blog/top-10-malware-december-2022 Zeus malware can give attackers full access to infected machines. While the original Zeus variant primarily utilized man-in-the-browser keyloggers to gain access to an infected computer’s banking credentials and other financial information, many forms of the Zeus virus can also be used to add CryptoLocker ransomware to an operating system or add infected computers to a botnet to perform distributed denial-of-service (DDoS) attacks. The Zeus…
Access Control Lists (ACLs) are used by firewalls (ACL). Explain what an ACL is and what it's usual contents look like. Explain what the word "salt" means in the context of cryptography and why it is used. You should go over how it is used to make it more difficult to break passwords and how it is implemented.
How can URI manipulation be exploited in security attacks, and what measures can be taken to prevent such attacks?