CYBERSESCURITY CHAPTER 7

Sniffing

The act of monitoring and intercepting data flowing through a network.

Eavesdropping

The act of secretly listening to private conversation or communications.

ARP Poisoning

The deliberate mapping of an incorrect MAC address to a correct IP address.

TCP Session Hijacking

The act of taking a user's or client's place after it has established a TCP connection with a server.

Man-in-the-Middle Attack

An attack where the attacker inserts himself into a client/server communication session.

DNS Cache Poisoning

An attack technique in which corrupt DNS data is entered into a DNS server's lookup (resolver) cache and fake records are then given to clients and other DNS servers.

Pass the Hash Attack

A network-based attack where the attacker steals hashed user credentials and uses them as-is to try to authenticate to the same network the hashed credentials originated on.

DoS attack

(denial of service) A network-based attack that prevents the target from performing its normal duties.

DDoS attack

(distributed denial of service) A DoS attack where many attackers are coordinated to attack one target.

Stress Testing

The process of determining the ability of a computer, network, application, or device to maintain a specified level of effectiveness under unfavorable conditions.

VLAN

(virtual local area network) A logical group of switch ports that can extend across any number of switches on an Ethernet campus.

VLAN hopping

The act of illegally moving from one VLAN to another.

NAC

(Network Access Control) The collection of protocols, policies, and hardware that govern access of devices connecting to a network.

Replay Attack

The process of repeating a legitimate transmission in a malicious context.

Fragmentation Attack

An attack that obtains the PRGA of network packets used in WEP.

Jamming

An attack in which radio waves disrupt Wi-Fi signals.

Evil Twin

A rogue access point that attempts to deceive users into believing that it is a legitimate access point.

Bluejacking

The sending of unwanted Bluetooth signals to other Bluetooth-enabled devices.

Bluesnarfing

An attack in which an attacker reads information from a victim's Bluetooth device.

Industrial Control Systems (ICS)

Any system that enables users to control industrial and critical infrastructure assets over a network.

SCADA

A type of ICS that typically monitors critical infrastructure and can issue remote commands to those assets.

Embedded Systems

Computer hardware and software systems that have a specific function within a larger system.

Real-Time Operating System (RTOS)

A special type of embedded OS with a predictable and consistent scheduler.

Internet of Things (IoT)

A network of objects that are connected to the wider Internet using embedded electronic components.

Point of Sale

The place where customers purchase goods or services from a business.