Chapter2

Data residing in Ram is volatile 

Windows paging file –  extension of RAM

Buffer overflow attack- floods memory 

Heap Spraying ATTACK- causes buffer overflow attacks, peppers the memory, and leaves code over the memory so its code is executed 

Worms- Doesn’t require user interaction to spread, propagates through internet.  

Rootkit- screensaver changes without permission, things in windows don’t seem to work. Hides from the Antivirus and takes control of the computer. Gets into kernel. Hard drive fills up and u don’t know why. 

Data Execution Prevention- ensures that a program behaves properly in memory, limits memory that a program can have, prevents buffer overflow attacks. Allows you to choose programs to not allow overflowing in memory. 

Common Vulnerability Enumeration(CVE) 

-Database 

- 

File Systems 

-NTFS 

Master file table used 

files are placed logically, looks for 

-FAT32 

File allocation table used 

everything about file is stored in FAT at beginning of drive 

-EXT4 

linux uses 

-HFS 

apple used 

APFS newer 

-dumps data in clumps