5) Explain two outcomes an attacker may aim for with a Buffer overflow attack. Sketch how and why a Buffer overflow attack works. You do not need to write code but can if it helps you to explain. 6) Explain what a Trojan Horse is. Describe two distinct methods of identifying a Trojan Horse and explain when and why each of those methods might be appropriate. 7) What is a honeypot? What role might it play in the detection and management of intrusions? Give an example to illustrate how particular data within a real system might be considered to be a honeytoken.

5) Explain two outcomes an attacker may aim for with a Buffer overflow attack. Sketch how and why a Buffer overflow attack works. You do not need to write code but can if it helps you to explain. 6) Explain what a Trojan Horse is. Describe two distinct methods of identifying a Trojan Horse and explain when and why each of those methods might be appropriate. 7) What is a honeypot? What role might it play in the detection and management of intrusions? Give an example to illustrate how particular data within a real system might be considered to be a honeytoken.

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

Is it possible for a single individual to plan a DDoS attack?
Cryptography
Give a thorough explanation of DDoS (distributed denial of service) attacks. What is the difference between DDoS assaults and Denial of Service attacks?
Consider how salt protects passwords in encryption.
Explain the definition of the word "firewall" in terms of network security, as well as how it is employed in different network topologies.
1) Describe the difference(s) between an authenticated user and an authorised user. 2) Describe three distinct types of attacks against password systems. Briefly discuss appropriate countermeasures against one of those types of attacks. 3) Explain two outcomes an attacker may aim for with a Buffer overflow attack. Sketch how and why a Buffer overflow attack works. You do not need to write code but can if it helps you to explain. 4) Explain what salting is, where we use it, and why we use it. 5) Briefly describe how an encrypted virus works. 6) Describe two primary properties used in malware classification and two distinct methods of identifying a virus. 7) Describe how honeypots can be used in an intrusion detection system.
Describe the concept of "VM escape attacks" and the measures that can be taken to prevent them.
Is it feasible for a single person to carry out the planning and execution of a distributed denial of service attack?
Cross-site request forgery (CSRF) attacks may be conducted using XSS vulnerabilities. Please suggest an alternative technique of CSRF attack outside cross-site scripting (XSS) and provide the necessary rationale.
Provide an explanation between two and four lines long for each of the following forms of internet attack: Cross-Site Scripting (often referred to simply as XSS) (XSS) -Attacks Carried Out Via Injection -Perplexing (or Fuzz Testing) (or Fuzz Testing) - Attack on Zero-Day - Directional Indicators (or Directory) Traversal -Using Unknown Code or Code from a Third Party
How does an XSS attack operate and what is it?
Given an NMAP scan on a given target. You are to use open-source information to identify the best possible attack vectors, the exploits to use, and the gains from those exploits. The answer should be 1-3 pages long. . You will also provide at least 1 source for each exploit to back up your argument (MLA Format).