Professor Messers Security+ 4.3 Videos

vulnerability scanning

used to test if a system is suseptable to a type of attack

port scan

what ports are open

static application security testing

also known as SAST; software that reviews the source code to see where vulnerabilites may be

dynamic analysis

also known as fuzzing; take random inputs & puts it into an application to see what it does

open source intelligence

also known as OSINT; available to anyone you just have to look

dark web

uses internet for transport but content is only accessable by specilizaed software; normally for attackers/hackers

pentest

simulate an attack on our own system

bug bounty

rewards for someone finding bugs within system

false positive

information about vulnerabilities that dont exist

common vulnerabilty scoring system

also known as CVSS; each vulnerabilty is scored between 0-10; 10 being the worst