Security+ Chapter 3

Front 1

ActiveX

Back 1

A set of rules for how applications under the Microsoft Windows operating system should share information

Front 2

ActiveX Control

Back 2

A specific way of implementing ActiveX that runs through the web browser and functions like a miniature application

Front 3

Add-on

Back 3

Program that provides additional functionality to web browsers. Also called extension

Front 4

Address Resolution Protocol

Back 4

Part of the TCP/IP protocol for determining the MAC address based on the IP address

Front 5

Arbitrary/ Remote Code Execution

Back 5

An attack that allows an attacker to run programs and execute commands on a different computer

Front 6

ARP Poisoning

Back 6

An attack that corrupts the ARP cache

Front 7

Attachment

Back 7

A file that is coupled to an email message and often carries malware

Front 8

Buffer Overflow Attack

Back 8

An attack that occurs when a process attempts to store data in RAM beyond the boundaries of a fixed-length storage buffer

Front 9

Client-side Attack

Back 9

An attack that targets vulnerabilities in client applications that interact with a compromised server or process malicious data

Front 10

Command Injection

Back 10

Injecting and executing commands to execute on a server

Front 11

Cookie

Back 11

A file on a local computer in which a web server stores user-specific information

Front 12

Cross-site Scripting

Back 12

An attack that injects scripts into a web application server to direct attacks at clients

Front 13

Denial of Service

Back 13

An attack that attempts to prevent a system from performing its normal functions by overwhelming the system with requests

Front 14

Directory Traversal

Back 14

An attack that takes advantage of a vulnerability so that a user can move from the root directory to restricted directories

Front 15

Distributed Denial of Service

Back 15

An attack that uses many computers to perform a DoS attack

Front 16

DNS poisoning

Back 16

An attack that substitutes DNS addresses so that the computer is automatically redirected to an attacker's device

Front 17

Domain Name System (DNS)

Back 17

An attack that substitutes DNS addresses so that the computer is automatically redirected to an attacker's device

Front 18

Extension

Back 18

Another name for add-on

Front 19

First-Party Cookie

Back 19

A cookie that is created from the website currently being viewed

Front 20

Flash cookie

Back 20

Another name for locally shared object (LSO)

Front 21

Host Table

Back 21

A list of the mappings of host names to IP addresses

Front 22

HTTP Header

Back 22

Part of the HTTP that is comprised of fields that contain the different characteristics of the data that is being transmitted

Front 23

HTTP Header Manipulation

Back 23

Modifying HTTP headers to create an attack

Front 24

Integer Overflow Attack

Back 24

An attack that is the result of an attacker changing the value of a variable to something outside the range that the programmer had intended

Front 25

Locally Shared Object (LSO)

Back 25

A cookie that is significantly different in size and location from regular cookies, and can store more complex data. Also called a flash cookie

Front 26

Man-in-the-Middle

Back 26

An attack that intercepts legitimate communication and forges a fictitious response to the sender

Front 27

Persistent Cookie

Back 27

A cookie that is recorded on the hard drive of the computer and does not expire when the browser closes

Front 28

Ping

Back 28

A utility that sends an ICMP echo request message to a host

Front 29

Ping Flood

Back 29

An attack that uses the Internet Control Message Protocol to flood a victim with packets

Front 30

Plug-in

Back 30

A third party library that attaches to a web browser and can be embedded inside a webpage

Front 31

Privilege Escalation

Back 31

An attack that exploits a vulnerability in software to gain access to resources that the user normally would be restricted from accessing

Front 32

Replay

Back 32

An attack that makes a copy of the transmission before sending it to the recipient

Front 33

Session Cookie

Back 33

A cookie that is stored in RAM, instead of on the hard drive, and only lasts for the duration of a visit to a website

Front 34

Session Hijacking

Back 34

An attack in which an attacker attempts to impersonate the user by using the user's session token

Front 35

Session Token

Back 35

A form of verification used when accessing a secure web application

Front 36

Smurf Attack

Back 36

An attack that broadcasts a ping request to computers yet changes the address so that all responses are sent to the victim

Front 37

Spoofing

Back 37

Impersonating another computer or device