INFO SEC REVIEWER HANDOUT 05

This is program a black hat hackers users to transmit command remotely to infected zombie drones normally to carryoutDoS

This is process where the hacker has alread gained access to a system.

These are a blend of both black and white hackers.

It is a software designed to force pre-chosen ads to display on a system.

Also known as a "zombie army," is a group of computers controlled without their owners' knowledge.

This early Trojan altered/augmented the OS at a very low level of function calls.

Type of computer security vulnerability typically found in web app.

This is an act of exploiting holes in unpatched or poorly configured software.

This is the phase where the attacker gathers information about a target using active or passive means.

It is an automated and the simplest kind of method to gain access to a system or website.

Social status among hackers, which is used to describer the most skilled hacker.

This is a weakness that allows a hacker to compromise the security of a computer or network system.

This process the vulnerability is located. The attacker attempts to exploit it to enter into the system.

Is a type of malicious code or software that looks legitimate but can take control of one's computer.

Software that aims to gather information about a person or organization without their knowledge and may send such info

Malicious program or a piece of code which is capable of copying itself and typically has detriment effect, such as curr

It is defined as a hi-jacked computed that is being used anonymously as a soldies or 'drone' for malicious activity.

Technique used to gain unanthorized access to computers where the intruder sends message to computer with IP Address

modification of an exizting, legitimate e-mail with a falst link to trick the recipient into providing personal info

Also known as "trap door", this is a hidden entry to a computing device or software that bypasses security measures,

SQL Code injection technique used for attacking data-driven applications, in which malicious SQL statements are inserted

These are also known as "Ethecial Hackers"

They wrote the earlist known rootkit in the early 1900s

Promotes foundational understanding on cyber threats and risk, cyber hygiene, and appropriate response option

It is a piece of software, a chunk of data, or a sequence of commands that takes advantage of a bug or vulnerability.

Is a hacker who utilizes technology to announce a social, ideological, religious, or political message.

It is a virus secreted into a system that triggers a malicious action when certain conditions are met.

In 2004/05, intruders installed a rootkit that targeted Ericsson's AXE PBX

"Noob", "newbie", or "Green Hat Hacker" is someone who is new to hacking or phreaking and has almost no knowledge

This is a computer malware discovered in 2012 that attached computers running Windows OS.

filter designed to keep unwanted intruders outside a computers system or network while allowing safe communication

This is the first known rootkit for industrial control system.

Is A blend of both black hat and white hat hackers.

implies deceiving someone to acquire sensitive and personal inforation life credit card details or usernames and pass

It is an umbrella term used to refer to a variety of forms of hostile or intrusice software, including computer viruses,

The last step in fishing the ethical hacking process.

Malicious program disguised to look like a valid program, making it difficult to distinguish from programs

This is a stealthy type of a software, typically malicious designed to hide the existend of certain processes or program

This is a flow that occurs when more data is written to a block of memory or buffer than the buffer is allocated to hold

This process is an unetical Activity. It has to do with the deletion of logs of all the activities that take place

It is a software system designed to run on web servers to identify software vulnerabilities in client machines

Possible danger that can exploit an existing bug or vulnerability to compromise the security of a com or net system

Itis a malicious attempt to make a server or a network resourve unvailable to users ussually by temporarily interrupting

This process the attacker begins to probe a target machine or network actively for vulnerabilities that can exploited.

Is non-expert who breaks into computer systems by using pre-packeged automated tools written by others.

It is simple an unsolicited email also known as junk emal, sent to a large number of recipients

Is someone outside computer security consulting firms who are used to bug-test a system before its lunch.

This is the process of tracking the keys which are pressed on a computer 'which touchscreen points are used.'

This is the first rootkit that targeted Mac OS and appeared in 2009

This is one of the first malicious rootkits targeted at Windows 0S.

Also Known as "Crakers", these hackers hack to gain unauthorized access to a system

S/he modifies the software to access the features which are considered undesirable by the person cracking the software.

These are considered as the original computer hackers.

sends out legitimate-looking emails in an attempt to gather personal and financial info from recipients.

It is a self-replicaitng virus that does not alter files but reside in active memory and duplicates itself.

program that automates an action so that it can be done repeatedly, more sustained period than a human operator could.

It is an action that is done on a system to get it access and extract sensitive data.