Professor Messers Security+ 2.3 Videos

Can malware run on its own?

Yes, maleware can run its own process or find an existing process & insert itself in that

where does malware go?

typically between starting address to the end address (only when injecting malware into already running process)

Dynamic link library

also known as DLL; popular form of malware injection; on your system that many applications can use

buffer overflow

An attacker writing more than whats held in a memory & this then spills into another area of memory

Are buffer overflow attacks easy?

Not exactly, this overflow could cause crashing or could take time to take affect

race conditions

two events happen at the same time with an application; developer doesnt know & this could cause an unexpected out put

time of check to time of use

common form of race condition; also known as TOCTOU; application may check system find something & see what it could do with that value; if the time & value are both not checked they can overlap & cause a race condition

should we blindly update?

No, be mindful of all software updates as an attacker could imbed a code within this update

before downloading an update what should we do?

confirm the source (pop ups may not be legit); download directly from site; only download signed apps

operating systems

foundational computing platforms; important to keep it updated as attackers will find vulnerablities to gain access

code injection

attackers puts their own code into an application

Name 4 code injections

HTML

SQL

XML

LDAP

SQL

Also known as structured query language; most popular way to have an application interact with a database; take information input into application & put it into a database

SQLi

an attacker putting their own request into the database; application shouldnt allow this

cross site scripting

also known as XSS; vulnerablities found within apps; most common vulnerabilities & causes your information to be shared with other sites

non persistant attack

also known as a reflected attack; a third party website allows users to run scripts within their website/input box

persisted attacks

also known as stored attack; attacker will post message on social media included malicious payload/javascript

how to protect against XSS?

do not click links from third party sites; disable javascript or limit it; keep browser & applications updated

firmware

an operating system running inside a device that we do not have access to

what counts as a hardware device

lightbulbs

garage door

door locks

refridgerators

end of life

also known as EOL; When a device is no longer able to be upgraded, in the future these products wont be sold

end of service life

also known as EOSL; when a company decides they will no longer sell & update this product

legacy platform

a device thats running an old application; or software typically on EOSL or EOL; a device that is needed in company

virtual machine escape

allows attacker to get from one virtual machine to another

denial of service

also known as DoS; people attempting to disable an application in a public cloud

out of bounds write

writing information into memory even though that aer ais unauthorized for users

supply chain risk

the process of moving raw materials to the end goal of consumers

sideloading

installing application outside of the app store

zero day attacks

attackers exploiting vulnerability & no patch available to mitigate issue