Security Chapter 3

Front 1

malware

Back 1

1. software that enters a computers system without the owners knowledge or consent

2. Performs unwanted and usually harmful action

Front 2

malware objectives

Back 2

1. rapidly spread its infection

2. conceal its purpose

3. make profit for its creators

Front 3

virsus

Back 3

1. malicious computer code that reproduces on a single computer

Front 4

methods of spreading a virus

Back 4

1. virus appends its self to a file

2. viruses changes the beginning of the file (adds jump instruction pointing to the virus)

3. swiss cheese infection (injects portions of code throughout programs executable code

Front 5

virus actions

Back 5

1. causing the computer to crash repeatedly

2. displaying an annoying message

3. erasing files from the hdd

4. making copies of its self to consume all space on the hdd

5. turning off security settings

6. reformatting the hdd

Front 6

virsus replication

Back 6

only replicates on host computer

Front 7

types of virsuses

Back 7

1. program virus ( infects program exe files)

2. macro virus (stored within a user document)

Front 8

worm

Back 8

1. malicious program designed to take advantage of a vulnerability in an application or os

2. searches for another computer with the same vulnerability

3. sends copies of itself over the network

Front 9

worm actions

Back 9

1. consume network resources

2. allows computer to be controlled remotely

3. delete files

Front 10

how does it spread to other computers

Back 10

VIRUS because viruses are attached to files they spread by a user transferring those programs to other devices

WORM worms use a network to travel from one computer to another

Front 11

how does it infect

Back 11

VIRUS insert their code into a file

WORM exploit vulnerabilities in applications or os

Front 12

does there need to be user action

Back 12

virus - yes

worm - no

Front 13

can it be remote controlled

Back 13

virus - no

worm - yes

Front 14

types of concealing malware

Back 14

1. trojan

2. rootkit

3. backdoor

4. arbitrary code exe

Front 15

trojan

Back 15

1. exe program containing hidden malware code

2. program advertised as performing one activity but usually does something else

3. may be installed on users system with users approval

4. typically do not replicate to same pc or another pc

Front 16

rootkit

Back 16

1. set of software tools used by an attacker

2. conceals presence of other malicious software

3. deletes logs

4. changing os to ignore malicious activity

Front 17

backdoor

Back 17

1. software code that gives access to program or service

2. circumvents normal security protections

Front 18

keylogger

Back 18

hardware of software that captures keystrokes

information can be retrieved by an attacker

Front 19

hardware keylogger

Back 19

installed between pc keyboard and usb port

Front 20

software keylogger

Back 20

hides itself from detection by the user

Front 21

arbitrary code exe

Back 21

attacker uses buffer overflow attack to gain control of victims pc

Front 22

buffer

Back 22

storage area on a computer the contains (return address) for the pc cpu

Front 23

buffer flowback attack

Back 23

attacker substitutes own return address in the buffer

leads to malware code

Front 24

remote control attack

Back 24

zombie

botnet

Front 25

zombie

Back 25

infected robot pc

Front 26

botnet

Back 26

thousands of zombies

can remain active for years

Front 27

bot herder

Back 27

attacker controls zombies using http commands

Front 28

spamming

Back 28

a botnet consisting of thousands of zombies enables an attackers to send massive amounts of spam, can harvest email

Front 29

spreading malware

Back 29

botnets can be used to spread malware and create new zombies and botnets zombies have the ability to download and execute a file sent by the attacker

Front 30

manipulating online polls

Back 30

because each zombie has a unique up address each can count for authentic

Front 31

denying srevices

Back 31

botnets can flood a web server with thousands of requests and overwhelm it to the point that it can not respond to legitmate requests

Front 32

spyware

Back 32

software that spies on the user without users consent

Front 33

spyware actions

Back 33

control use of system resources

collect personal info

impact user experience privacy or system security

Front 34

automatic download software

Back 34

used to download and install software without the users interaction

can be used to install unauthorized apps

Front 35

passive tracking technologies

Back 35

used to gather info about user activities without installing any software

can collect private info

Front 36

system modifying software

Back 36

modifies or changes user configurations to setting the user did not approve

Front 37

tracking software

Back 37

used to monitor user behavior or gather info about the user collects info about user collects personal info

Front 38

spyware effects on pc

Back 38

slows system

creates system instability

add browser toolbars or menu

add shortcuts

hijack homepage

increase popups

Front 39

adware

Back 39

software that delivers advertising content

Front 40

adware actions

Back 40

display popup adds and banners

open browsers at random intervals

may display objectionable content

may interfere with user productivity

may track and monitor user interactions

Front 41

scareware

Back 41

software that displays a fictitius warning

tries to impel users to take action

uses legitimate trademarks or icons

pretends to perform a security scan to find problems

offers purchase of full version to fix problems

victim provides credit card number to attacker

Front 42

computer defenses a user should implement

Back 42

manage patches

install antivirus software

configure personal firewall

using uac

protecting against theft

create data backup

know steps to recover from attack

Front 43

patch

Back 43

software security update intended to cover vulnerabilities discovered after the program was released

Front 44

service pack

Back 44

software package of cumulative security updates and features

Front 45

configuring options for updates

Back 45

install updates automatically

download updates and user chooses whether to install

check for updates and user chooses whether to download and install

never check for updates

Front 46

antivirus software

Back 46

scans a pc hdd for infections

monitors pc security

examines new doc that may contain a virus

works by matching to known virus signatures

should have signatures updated frequently

Front 47

software based firewall

Back 47

designed to prevent malware from enter the pc

examines incoming data from the internet or lan

filters certain content

user controls programs access to flow of traffic

Front 48

personal firewall

Back 48

protects only pc which it is installed

based on programs running on pc

Front 49

network firewall

Back 49

protects all devices connected to the network

provides sophisticated range of filtering mechanisms

Front 50

recommended personal firewall settings

Back 50

turn on firewall for all network locations and connections

block all inbound connections

Front 51

uac

Back 51

indicates privilage level of the user personal configuration setings

Front 52

three types of user accounts

Back 52

standard

administrator

guest

Front 53

uac

Back 53

alerts user to os system events

ask permissions to perform certain tasks

helps to prevent trojan from making unauthorized changes

user with administrator can authorize changes

Front 54

uac notification settings

Back 54

always notify

notify me only when programs try to make changes to my pc

never notify

Front 55

backup

Back 55

backup system periodically

most os has this function built in