Computer Security

Types of exploits: viruses, worms, trojans, and various attack technologies.

5 flashcards · Computer Science · by lakesare

1. Virus VS worm VS Trojan horse?

   Virus: executes when user executes some file (eg coming from an email attachment), spreads when user resends a file. Worm: unlike viruses, worms don't need human action to execute or propagate, instead they enter a computer through its vulnerabilities. Trojan horse: virus that looks like a useful program.

2. What is a backdoor?

   Method of bypassing normal authentication. Can be: left by developer on purpose (eg password recovery), established by a hacker (by worm e.g.) in order to have an easier access to infected computer

3. What is a macro virus?

   Some programs, e.g. Microsoft Word, allow code to be embedded into word files. Code is getting executed when this file is open. It's written in macro language. This is the reason it's dangerous to open attachments from emails.

4. Name 3 virus detection techniques.

   signature-based: check all .exe files and validate against known list of codes for viruses. sandbox - executes file in a virtual machine. behaviour-based - looks at what file does while running. Sandbox and behaviour-based techniques check for example: if a file begins to replace several system files, if file is trying make a TCP connection back to a known malicious IP address.

5. What's a CSRF?

   Cross-site request forgery. Attack that tricks the victim into submitting a malicious request. CSRF attacks specifically target state-changing requests, not theft of data, since the attacker has no way to see the response to the forged request.Links: easy definition of CSRF