Acquired Software Security Impact

Question 1

Operating system attacks

Answer 1

attackers always search for OS vulnerabilities (buffer overflow, OS bugs, unpatched OS)

Question 2

Application level attacks

Answer 2

overflow, active content, cross-site script (XSS), DoS, SQL injection, session hijacking, phishing

Question 3

Shrink Wrap Code Attacks

Answer 3

exploiting holes in unpatched or poorly configured software you buy and install

Question 4

Misconfiguration attacks

Answer 4

target: poorly configured service or device; weak default settings