Exam 2 Hs 235

Front 1

ACK

Back 1

Acknowledgement Number

Front 2

connection-oriented protocol

Back 2

TCP -means the sender doesn't send any data to the destinations node until the destination acknowledges that its listening to the sender.

Front 3

connectionless protocol

Back 3

User Datagram Protocol - operates on transport layer- used for speed

Front 4

Initial Sequence Number (ISN)

Back 4

is a 32 bit number, Track packets received by a node, allows reassembly of large packets that were broken into smaller packets,

It is in steps 1 and 2 of the TCP three way handshake. sent SYN and returned in the SYN ACK packet.

Front 5

Internet Assigned Numbers Authority ,(IANA)

Back 5

The global coordination of the DNS Root, IP addressing numbers.

Front 6

Internet Control Message Protocol (ICMP)

Back 6

Helps troubleshoot network connectivity problems, ping command, tracks the route a packet traverses, traceroute command

Front 7

TCP three way handshake

Back 7

computer A sends computer B a SYN packet

computer B replies with a SYN-ACK packet

Computer A replies with an ACK packet

Front 8

SYN Packet

Back 8

Synchronized message to the server

Front 9

Port

Back 9

Logical, not physical, TCP connection component, identifies running service, helps you stop or disable unneeded services more running services, more ports open for attack.

Front 10

TCP packet

Back 10

Two 16-bit fields, contains source and destination port numbers

Front 11

Protocol

Back 11

Language used by computers to communicate

Front 12

Transmission Control Protocol/ Internet Protocol (TCP/IP)

Back 12

Most widely used

Front 13

TCP/IP Stack

Back 13

4 Distinct Layers:

Network

Internet

Transport

Application

Front 14

TCP Flag

Back 14

Each flag occupies one bit of the TCP segment,

SIX TCP FLAGS:

SYN flag- synch flag

ACK flag- acknowledgement flag

PSH flag-push flag

URG flag-urgent flag

RST flag- reset flag

FIN flag- finish flag

Front 15

Port 25

Back 15

Simple Mail Transfer Protocol (SMTP)

email servers listen on this port

Front 16

Port 53

Back 16

Domain Name Service (DNS)

Used to connect users to web sites using URLS instead of IP addresses.

Front 17

Port 80

Back 17

Hypertext Transfer Protocol (HTTP)

used when connecting to a Web Server

Front 18

Port 443

Back 18

Secure Hypertext Transfer Protocol

reserved for secure connections to a Web server

Front 19

Port 110

Back 19

Post Office Protocol 3 (POP3)

Used for retrieving e-mail

Front 20

User Datagram Protocol (UDP)

Back 20

Fast but unreliable delivery protocol

Operates on transport layer

used for speed

does not need to verify if receiver is listening or ready, connectionless protocol

Front 21

IP Address

Back 21

Class A 1-126, Class B 128-191, Class C 192-223

It is composed of 4 bytes, one byte is equal to 8 bits which is an octet

Front 22

Class C

Back 22

supports 254 host computers

Front 23

HEX C1, DEC 193

Back 23

BIN 1100 0001

Front 24

adware

Back 24

installed without users being aware, determines users purchasing habits, slows down computers

Front 25

Attack

Back 25

Any attempt by an unauthorised person to access damage, or use network resources. Usually happens when a weakness or a vulnerability is exploited.

Front 26

backdoor

Back 26

allows attackers remote access also called rootkits they are created after an attack and usually hide in OS tools, delivered through trojan programs

Front 27

bot net

Back 27

a network of private computers infected with malicious software and controlled as a group without the owners knowledge, ex to send spam

Front 28

Exploit

Back 28

A specially crafted string of data intended to take advantage of a vulnerability.

Front 29

Network Security

Back 29

Concern with security of network infastructure

Front 30

Computer Security

Back 30

Concern with security of a stand alone computer, not part of a network Infrastructure.

Front 31

Denial of Service Attacks

Back 31

Prevents legitimate users form accessing network resources

Attackers do not attempt to access information, may just want to cripple the network

Front 32

Distributed Denial of Service Attacks

Back 32

Attack on host from multiple servers or workstations,

network could be flooded with billions of packets resulting in a loss of bandwidth and degradation or loss of speed. Participants are not aware they are part of the attacks.

Front 33

Dark DDoS

Back 33

It is a smokescreen to distract network defenders form the real attack occuring.

Front 34

Buffer Overflow Attacks

Back 34

Attacker finds a vulnerability in poorly written code, no check for amount of memory space use, it fills the buffer with executable code, os runs the code and code elevates attackers permissions to administrator or owner or creator

Front 35

Eavesdropping

Back 35

Attacker listens in on unencrypted network communications, to gather information that can be used to extend attack. This is accomplished with sniffing tools designed to capture copies of packets being sent across a network. Must encrypt communications.

Front 36

Man in the Middle

Back 36

Attacker injects themselves between two parties or systems communicating in order manipulating messages being passed back and forth.

Front 37

Network Session Hijacking

Back 37

Attacker joins TCP session and makes both parties think he or she is the other party, Complex attack

Front 38

Ping of death attack

Back 38

Type of DOS attack not as common since the late 1990s, attacker creates large ICMP packet , it is then segmented and then reassembled as an oversize packet that the Destination point cant handle.

Front 39

Malware

Back 39

Malicious software that attacks a network which prevents a business from operating. Viruses, worms, Trojan programs, and the main goal is to make money.

Front 40

Viruses

Back 40

A program that attaches itself to a file or another program. Needs host to replicate, Does not stand on its own, no foolproof prevention method. Phishing and ransomware.

Front 41

Antivirus programs

Back 41

Detection based on virus signatures, must update periodically. Run a base 64 decoder on email attachments to see if malware or viruses are detected.

Front 42

Macro virus

Back 42

A virus encoded as a macro in programs that support a macro programming language. basically a list of commands can be use in destructive ways. Instructions posted on websites.

Front 43

Worms

Back 43

A program that replicates and propagates without host. , theoretically can infect every computer in the world. Some worms have cost businesses billions. caused by down computer time, recovering lost data and hiring of IT personnel.

Front 44

Trojan Programs

Back 44

Insidious attacks against networks and computers, disguise themselves as useful programs, can install backdoors and rootkits.

prevent with good software and hardware firewall.trojans can use port 80 and port 53.

Front 45

Spyware

Back 45

Sends information form infected computer to attacker, ex. financial data, passwords, pins and can register each keystroke entered.

Front 46

Whitelisting

Back 46

Allows only approved programs to run on computers

Front 47

Keyloggers

Back 47

Used to capture keystrokes on a computer, software-loaded on Computer, hardware- easy to install device between keyboard and computer. also available as spyware and can be sent over e-mail.

Front 48

Shell (Backdoor)

Back 48

Malicious piece of code that can be uploaded to site to gain access to files stored on the site. Once uploaded hacker can use it to edit, delete, or download any files on the site. Usually uploaded to websites to gain root access to the site.

Front 49

Zombies

Back 49

Bots that perform malicious tasks allowing an attacker to take complete control over an infected computer which gives the attacker complete control turning the computer into a zombie.

Front 50

bot

Back 50

type of software application or script that performs tasks on command like indexing a search engine and good at performing repetitive tasks.

Front 51

ransomware

Back 51

type of malicious software designed to block access to a computer system until a sum of money is paid.

Front 52

Competitive Intelligence

Back 52

Gathering information using technology

Front 53

Cookie

Back 53

Text file generated by a web server, stored on users web browser used to customize web page when user returns

Front 54

Dumpster Diving

Back 54

Attacker finds information in victims trash, ex computer manuals, passcodes jotted down, company phone directories, resumes, finacial reports, Format disks before disposing them.

Front 55

footprinting

Back 55

finding information on company's network, passive and nonintrusive, may also be called reconnaissance.

Front 56

Piggybacking

Back 56

Trailing closely behind an employee cleared to enter restricted areas.

Front 57

Phishing

Back 57

Email urging you to update account details, send you to visit a fake web site.

Front 58

Spear phishing

Back 58

Combines social engineering and exploiting vulnerabilities. Email attacks directed at specific people.

Front 59

Shoulder surfing

Back 59

reads what users enter on keyboards, uses binoculars and knows popular letter substitutions.

Front 60

social engineering

Back 60

Targets the human component of a network, goal is to obtain confidential information and other personal information. Gained persuasion, coercion, intimidation, and extortion. Biggest security threat, most difficult to protect against. Study of human behavior.

Front 61

Web Bug

Back 61

1x1 pixel image file, usually works with a cookie, clear gif, to be invisible to users, similar to spyware or adware.

Front 62

Spidering

Back 62

Also called web crawler, it is an internet bot that systematically browses the internet typically for the purpose of web indexing. can validate hyperlinks and html code.

Front 63

Zone Transfers

Back 63

It is the process, After determining what name server a company is using, you can attempt to transfer all the records for which the DNS server is responsible.

Front 64

DNS

Back 64

Domain Name System, resolves host names to IP addresses, people prefer url's to IP addresses. DNS is vulnerable for network attacks.