MOBILE VULNERABILITIES

What is malware?

• Impersonates an authorized device or user to steal data, spread malware, or bypass access control systems.

• A type of injection, in which malicious scripts are injected into otherwise benign and trusted websites.

• After gaining access to a system, the attacker takes malicious software and acts against the interests of the computer user

• A target or targets are contacted by email, telephone or text message by someone posing as a legitimate institution to lure individuals into providing sensitive data such as personally identifiable information, banking and credit card details, and passwords.

What is Phishing?

• Impersonates an authorized device or user to steal data, spread malware, or bypass access control systems.

• A type of injection, in which malicious scripts are injected into otherwise benign and trusted websites.

• After gaining access to a system, the attacker takes malicious software and acts against the interests of the computer user

• A target or targets are contacted by email, telephone or text message by someone posing as a legitimate institution to lure individuals into providing sensitive data such as personally identifiable information, banking and credit card details, and passwords.

What is Cross-site scripting (xss)?

• Impersonates an authorized device or user to steal data, spread malware, or bypass access control systems.

• A type of injection, in which malicious scripts are injected into otherwise benign and trusted websites.

• After gaining access to a system, the attacker takes malicious software and acts against the interests of the computer user

• A target or targets are contacted by email, telephone or text message by someone posing as a legitimate institution to lure individuals into providing sensitive data such as personally identifiable information, banking and credit card details, and passwords.

What is Wireless Spoofing?

• Impersonates an authorized device or user to steal data, spread malware, or bypass access control systems.

• A type of injection, in which malicious scripts are injected into otherwise benign and trusted websites.

• After gaining access to a system, the attacker takes malicious software and acts against the interests of the computer user

• A target or targets are contacted by email, telephone or text message by someone posing as a legitimate institution to lure individuals into providing sensitive data such as personally identifiable information, banking and credit card details, and passwords.

What is the types of attack?

• DDoS

• Man-in-the-middle

• Adware

• Spyware

What is the types of attack?

• DoS

• Man-in-the-middle

• Adware

• Spyware

How to defend DDoS attacks?

(Choose 3)

• Fight application-layer attacks in-line

• Only watch data breach

• Collaborate

• Watch out for secondary attacks

Choose the correct answer for Unstructured threats.

• Occurs when someone initiated by individuals or groups working outside of a company creates a security threat to your network.

• Consists of mostly inexperienced individual (script kiddies)

• Come from hackers who are more highly motivated and technically skilled.

• Occur when someone has authorized access to the network with either an account on a server or physical access to the network.

Choose the correct answer for Structured threats.

• Occurs when someone initiated by individuals or groups working outside of a company creates a security threat to your network.

• Consists of mostly inexperienced individual (script kiddies)

• Come from hackers who are more highly motivated and technically skilled.

• Occur when someone has authorized access to the network with either an account on a server or physical access to the network.

Choose the correct answer for External threats

• Occurs when someone initiated by individuals or groups working outside of a company creates a security threat to your network.

• Consists of mostly inexperienced individual (script kiddies)

• Come from hackers who are more highly motivated and technically skilled.

• Occur when someone has authorized access to the network with either an account on a server or physical access to the network.