Threat Modeling, Injection Attacks, and Security Terminology

Comprehensive vocabulary flashcards covering threat modeling frameworks, SQL injection categories and prevention methods, social engineering tactics, and common malware variants.

Threat modeling

The process of identifying assets, their vulnerabilities, and how each is exposed to threats.

Log4Shell (CVE-2021-44228)

A critical vulnerability in Java-based logging libraries that can allow remote code execution, giving an attacker full access to a system from anywhere in the world.

DevSecOps

A team structure standing for development, security, and operations that typically performs threat modeling and security analyses.

Threat modeling cycle

A recurring process consisting of six steps: define the scope, identify threats, characterize the environment, analyze threats, mitigate risks, and evaluate findings.

STRIDE

A threat-modeling framework developed by Microsoft to identify vulnerabilities across six attack vectors: spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege.

Process of Attack Simulation and Threat Analysis (PASTA)

A risk-centric, evidence-based threat modeling framework developed by two OWASP leaders and supported by VerSprite that uses a seven-stage process to model viable threats.

Trike

An open source methodology and tool that takes a security-centric approach to threat modeling, focusing on security permissions, application use cases, and privilege models.

Visual, Agile, and Simple Threat (VAST)

A threat-modeling framework that is part of an automated platform called ThreatModeler®, used by security teams to automate and streamline threat modeling assessments.

SQL (Structured Query Language)

A programming language used to create, interact with, and request information from a database.

SQL query

A request for data from a database, commonly used for retrieving, inserting, updating, or deleting information in tables.

SQL injection

An attack that executes unexpected queries on a database to modify, delete, or steal information and gain unauthorized access.

In-band SQL injection

The most common (classic) category of SQL injection that uses the same communication channel to launch the attack and gather the results.

Out-of-band SQL injection

An uncommon type of SQL injection that uses a different communication channel to launch the attack and gather results, bypassing server security controls.

Inferential SQL injection

A type of SQL injection where an attacker cannot directly view results and instead interprets them by analyzing the behavior of the system, such as through error messages.

Escaping user inputs

A defensive practice that prevents a user from inserting code that a program is not expecting.

Prepared statement

A coding technique that executes SQL statements before passing them on to a database to prevent injection attacks.

Input sanitization

A programming method that removes user input that could be interpreted as code.

Input validation

Programming that validates inputs from users and other programs to ensure they meet a system's expectations.

Angler phishing

A technique where attackers impersonate customer service representatives on social media.

Advanced persistent threat (APT)

Instances when a threat actor maintains unauthorized access to a system for an extended period of time.

Adware

A type of legitimate software that is sometimes used to display digital advertisements in applications.

Attack tree

A diagram that maps threats to assets.

Baiting

A social engineering tactic that tempts people into compromising their security.

Botnet

A collection of computers infected by malware that are under the control of a single threat actor, known as the 'bot-herder'.

Cross-site scripting (XSS)

An injection attack that inserts code into a vulnerable website or web application.

Cryptojacking

A form of malware that installs software to illegally mine cryptocurrencies.

DOM-based XSS attack

An instance when malicious script exists in the webpage a browser loads.

Dropper

A type of malware that comes packed with malicious code which is delivered and installed onto a target system.

Fileless malware

Malware that does not need to be installed by the user because it uses legitimate programs already installed to infect a computer.

Hacker

Any person or group who uses computers to gain unauthorized access to data.

Identity and access management (IAM)

A collection of processes and technologies that helps organizations manage digital identities in their environment.

Injection attack

Malicious code inserted into a vulnerable application.

Intrusion detection system (IDS)

An application that monitors system activity and alerts on possible intrusions.

Loader

A type of malware that downloads strains of malicious code from an external source and installs them onto a target system.

Malware

Software designed to harm devices or networks.

Phishing

The use of digital communications to trick people into revealing sensitive data or deploying malicious software.

Phishing kit

A collection of software tools needed to launch a phishing campaign.

Potentially unwanted application (PUA)

A type of unwanted software bundled with legitimate programs that might display ads, cause device slowdown, or install other software.

Quid pro quo

A type of baiting used to trick someone into believing they will be rewarded in return for sharing access, information, or money.

Ransomware

A type of malicious attack where attackers encrypt an organization's data and demand payment to restore access.

Reflected XSS attack

An instance when malicious script is sent to a server and activated during the server's response.

Rootkit

Malware that provides remote, administrative access to a computer.

Scareware

Malware that employs tactics to frighten users into infecting their device.

Smishing

The use of text messages to trick users into providing sensitive information or to impersonate a known source.

Social engineering

A manipulation technique that exploits human error to gain private information, access, or valuables.

Spear phishing

A malicious email attack targeting a specific user or group of users, appearing to originate from a trusted source.

Spyware

Malware that is used to gather and sell information without consent.

Stored XSS attack

An instance when malicious script is injected directly on the server.

Tailgating

A social engineering tactic in which unauthorized people follow an authorized person into a restricted area.

Threat

Any circumstance or event that can negatively impact assets.

Threat actor

Any person or group who presents a security risk.

Trojan horse

Malware that looks like a legitimate file or program.

Vishing

The exploitation of electronic voice communication to obtain sensitive information or to impersonate a known source.

Watering hole attack

A type of attack when a threat actor compromises a website frequently visited by a specific group of users.

Whaling

A category of spear phishing attempts aimed at high-ranking executives in an organization.

Web-based exploits

Malicious code or behavior that is used to take advantage of coding flaws in a web application.