12 CSC ATAR - Cyber security

Tick all that apply: APP 11 requires that APP entities...

• Take active measures to ensure the security of personal information it holds, and to actively consider whether it is permitted to retain personal information.

• Take reasonable steps to protect personal information from misuse, interference and loss, as well as unauthorised access, modification or disclosure.

• Take reasonable steps to destroy or de-identify the personal information it holds once the personal information is no longer needed.

Masquerading as a trusted device or user by forging the source IP address in network packets.

• Social engineering (phishing)

• Distributed denial of service

• Back door

• IP spoofing

• SQL Injection

Multiple sources coordinating an attack on a network, server, or website, by sending excessive network traffic to exhaust resources and make the resource unavailable to legitimate users.

• Social engineering (phishing)

• Distributed denial of service

• Back door

• IP spoofing

• SQL Injection

Exploiting vulnerabilities in web applications to insert malicious SQL code into a database query, potentially leading to data theft or manipulation.

• Social engineering (phishing)

• Distributed denial of service

• Back door

• IP spoofing

• SQL Injection

Injecting malicious scripts into otherwise trusted websites. These scripts can then run in the user's browser, potentially stealing information or hijacking sessions.

• Man-in-the-middle (MITM)

• Cross-site scripting (XSS)

• Zero day vulnerabilities

• Back door

Software flaws unknown to the software vendor and, therefore, for which no patch exists.

• Man-in-the-middle (MITM)

• Cross-site scripting (XSS)

• Zero day vulnerabilities

• Back door

A hidden method of bypassing normal authentication or encryption in a computer system, network, or software application, often installed by attackers.

• Man-in-the-middle (MITM)

• Cross-site scripting (XSS)

• Zero day vulnerabilities

• Back door

This encryption method is typically very fast, and so suitable for encrypting large volumes of data

• Symmetric encryption

• Asymmetric encryption

This encryption method is typically slow, due to its complex mathematical processes, and is generally used for one off processes such as handshakes over TLS/SSL for websites, digital signatures, and authentication

• Symmetric encryption

• Asymmetric encryption

Advanced Encryption Standard (AES) and Data Encryption Standard (DES) are both...

• Asymmetric encryption methods

• Symmetric encryption methods