Application Attacks

Question 1

Buffer Overflow

Answer 1

developer does not validate user input to ensure appropriate size (allow too large input)

Question 2

During which stage is a Back Door often used?

Answer 2

Development + Debugging

Question 3

Characteristics of Back Door

Answer 3

undocumented command sequences, allow individuals with back door knowledge to bypass normal restrictions

Question 4

Time of Check to Time of Use (TOC/TOU)

Answer 4

timing vulnerability = program checks access permission too far in advance of request

Question 5

Rootkit

Answer 5

freely available on the internet, exploits known vulnerabilities, allows escalation of privilege