Study Guide: Unit 3C - Web/App Vulnerabilties

What is memory injection in the context of computer security?

• A. A technique to insert or manipulate code within the address space of a running process.

• B. A method to enhance the functionality of a program by injecting additional memory resources.

• C. A process to debug software applications by injecting code snippets into memory.

• D. A mechanism to prevent unauthorized access to memory locations in a computer system.

What is a buffer overflow attack, and how does it occur?

• A. It's a social engineering attack that exploits human habits.

• B. It occurs when a buffer is filled and then extra data is added, leading to memory corruption.

• C. It's a debugging technique to enhance the functionality of software applications.

• D. It happens when an attacker hijacks cookies used to authenticate users on websites.

What is the main danger of buffer overflow attacks?

• A. They can result in the theft of sensitive information.

• B. They can lead to the unauthorized access of computer systems.

• C. They can cause unintended behavior or system crashes by overwriting adjacent memory locations.

• D. They can compromise the integrity of software updates.

How does an integer overflow attack differ from a buffer overflow attack?

• A. Integer overflow attacks target numerical variables, while buffer overflow attacks target string variables.

• B. Integer overflow attacks involve exceeding the capacity of numerical variables, leading to unintended results.

• C. Buffer overflow attacks exploit the speed of data writing in memory, while integer overflow attacks exploit data validation processes.

• D. Integer overflow attacks involve manipulating cookies, while buffer overflow attacks involve hijacking URLs.

What is a race condition bug, and how does it occur?

• A. It's a bug that occurs when a software update contains malicious code.

• B. It's a bug that arises from the race between different processes to write to shared memory.

• C. It's a bug that causes buffer overflows in software applications.

• D. It's a bug that occurs when an attacker exploits vulnerabilities in the update process.

What is a malicious update, and what risks does it pose?

• A. It's a deceptive software update that may contain malware or unwanted functionalities.

• B. It's an update designed to enhance the security of software applications.

• C. It's an update that fixes bugs and improves the performance of software.

• D. It's an update distributed through compromised update servers to improve system stability.

What is a replay attack?

• A. A method to guess passwords by asking the user directly

• B. Injecting malicious code into an application

• C. Capturing and reusing network packets to gain unauthorized access

• D. Exploiting vulnerabilities in the directory structure of a website

How can attackers capture network traffic for replay attacks?

• A. By exploiting the Address Resolution Protocol (ARP)

• B. By using malware to intercept packets

• C. By tapping into the network like a phone tap

• D. All of the above

What is a "pass the hash" attack?

• A. Guessing passwords by hashing them

• B. Sending hashed passwords to a server for authentication

• C. Intercepting password hashes and using them to gain access

• D. Storing password hashes securely

How can developers defend against replay attacks?

• By using strong authentication and access management

• By keeping password hashes safe and secure

• By implementing input validation and parameterized queries

• All of the above