NEW
Font size
WorksheetsITS 105 Cybersecurity - Objective - 1.3 - Security Principals
Total questions: 22
Worksheet time: 11mins
Inadequate security measures in Internet of Things devices introducing new risks.
Cybersecurity Exploits
Cybersecurity Vulnerabilities
IoT Vulnerabilities
Website And Application Attacks (Buffer Overflow)
Any circumstance or threat with the potential to cause harm to an asset, computer system or network.
Physical Attacks
Cyber Attack Vectors
Cybersecurity Threats
Insider Threats
Occurs when a program writes more data to a buffer than it can hold, causing the excess data to overflow into adjacent memory locations. This can lead to data corruption, program crashes, or even the execution of malicious code.
SQL Injection Attacks
Cross-site Scripting (XSS) Attacks
Denial of Service Attacks
Website and Application Attacks (Buffer overflow)
A stealthy computer network attack in which a person or group gains unauthorized access to a network and remains undetected for an extended period.
Brute Force Attack
Privilege Escalation Attack
Advance Persistent Threat (APT)
Organized Cyber Crime (occ)
People engage in cyber attacks for various reasons, including financial gain, political motives, personal grievances, and the thrill of causing disruption.
Physical Attacks
Reasons for Cyber Attacks
Cybersecurity Exploits
Insider Threats
A form of eavesdropping where the attacker makes an independent connection between two victims and steals information to use fraudulently.
Man in the Middle Attack
Brute Force Attack
Distributed Denial of Service Attack
Phishing Attack
Cybersecurity exploits are techniques or methods used to take advantage of vulnerabilities in a computer system or network, potentially allowing unauthorized access or malicious actions
Cybersecurity Exploits
Physical Attacks
Cyber Attack Vectors
Brute Force Attack
Threats to information systems and data integrity.
Cybersecurity Risks
Operational Risks
Nonrepudiation Risks
Environmental Risks
Software that encrypts programs and data until a ransom is paid to remove it.
Rootkit
Adware
Trojan
Ransomware
Attack vector that trumps logical, leverage remote device physical access to gain access to other devices on a network
Social Engineering Attacks
Phishing Attacks
Information Attacks
Physical Attacks
A set of computers that are penetrated by malicious software known as malware that allows an external agent to control their actions
Botnets
Trojans
Honeypots
Blockchains
A password-cracking program that tries every possible combination of characters.
Who are Cyber Attackers?
A form of eavesdropping where the attacker makes an independent connection between two victims and steals information to use fraudulently.
Cyberattacks can target a wide range of victims from individual users to enterprises or even governments. When targeting businesses or other organizations, the hacker's goal is usually to access sensitive and valuable company resources, such as intellectual property (IP), customer data or payment details.
A SQL Injection attack leverages system vulnerabilities to inject malicious SQL statements into a data-driven application, which then allows the hacker to extract information from a database. Hackers use SQL Injection techniques to alter, steal or erase application's database data.
Cyber attack vectors are the methods or pathways that cybercriminals use to gain unauthorized access to systems, networks, or devices, often exploiting vulnerabilities.
A SQL Injection attack leverages system vulnerabilities to inject malicious SQL statements into a data-driven application, which then allows the hacker to extract information from a database. Hackers use SQL Injection techniques to alter, steal or erase application's database data.
Website and Application Attacks (SQL injection)
IoT Vulnerabilities
Man in the Middle Attack
Replay Attack
Current or former employee, contractor or other partner that has or had authorized access and intentionally misused that access
An unauthorized attempt to increase permission levels.
Privilege Escalation Attack
User Authentication Attack
Access Control Attack
Data Encryption Attack
A weakness in an asset that can be exploited by a threat to cause harm.
IoT Vulnerabilities
Cybersecurity Vulnerabilities
Cybersecurity Mitigation
Physical Attacks
A type of software attack where an attacker inserts some type of undesired or unauthorized software into a target device
Malware Attack
Spyware Attack
Adware Attack
Ransomware Attack
Attacks that are carried out to intentionally block a service
Cyber attack vectors are the methods or pathways that cybercriminals use to gain unauthorized access to systems, networks, or devices, often exploiting vulnerabilities.
Brute Force Attack
Cyber Attack Vectors
Physical Attacks
Malware Attack
Is an attempt by cybercriminals, hackers or other digital adversaries to access a computer network or system, usually for the purpose of altering, stealing, destroying or exposing information.
Cybersecurity Types of Attackers
Malware Attack
Physical Attacks
Cyber Attack Vectors
When someone pretends to be someone else with the intent of obtaining unauthorized data.
Spoofing
Tailgating
Sniffing
Spooling
