MS Security Fundamentals Lesson 4 Vocab

Also known as a proxy server. Works by performing a deep inspection of application data as it traverses the firewall. Rules are set by analyzing client requests and application responses, then enforcing correct application behavior.

• application-level firewall
• buffer overflow attack
• Host Firewall
• honey net

an attack on the protocol used to determine a device’s hardware address (MAC address) on the network when the IP address is known.

• ARP spoofing

• SYn flood

• buffer overflow attack

• honeypot

An attack against an opening left in a functional piece of software that allows access into a system or software application without the owner’s knowledge.

• backdoor attack
• cross-site scripting (XSS) attack
• circuit-level firewall
• security policy

An attack that exploits poorly written code by injecting data into variable fields and leveraging the response to access information in the application. This attack is made possible when the application developer doesn’t limit or check the size of the data being entered in an application field.

• buffer overflow attack

• demilitarized zone (DMZ)

• cross-site scripting (XSS) attack

• sniffers

Typically considered second-generation firewall technology. Works in a similar fashion to packet-filtering firewalls, but operates at the transport and session layers of the OSI model.

• circuit-level firewall
• denial-of-service (DoS) attack
• demilitarized zone (DMZ)
• strong password

By far the most common and potentially the most dangerous current attack against web users. These attacks allow attackers to bypass the security mechanisms provided by the web browser. By injecting malicious scripts into web pages, and getting users to execute them, an attacker can gain elevated access privileges to sensitive page content, session cookies, and a variety of other information maintained by the browser.

• cross-site scripting (XSS) attack

• CRSF

• Buffer overflow

• Session Hijacking

A firewall configuration used to secure hosts on a network segment.

• demilitarized zone (DMZ)

• ARP spoofing

• distributed denial-of-service (DDoS) attack

• application-level firewall

An attack whereby the attacker renders a machine or network resource unavailable. It is usually done by flooding the targeted machine or resources with superfluous requests in an attempt to overload the system.

• denial-of-service (DoS) attack

• backdoor attack

• DNS poisoning

• ARP spoofing

Multiple computers are used to overwhelm the network resource.

• distributed denial-of-service (DDoS) attack
• buffer overflow attack
• DNS Security Extensions (DNSsec)
• application-level firewall

An attack against the cached information on your DNS server.

• DNS poisoning
• circuit-level firewall
• DNS spoofing
• ARP spoofing