The CIA is Watching
The three properties that define the goals of information security.
What is Confidentiality, Integrity, and Availability?
A type of cryptographic function that produces a fixed-length digest and cannot be reversed.
What is a hash?
This software replicates itself across networks without requiring a host file or user interaction.
What is a worm?
This type of attack targets Availability by overwhelming a target with traffic from many sources at the same time.
What is a Distributed Denial of Service (DDoS) attack?
This company had a data breach in 2012 that exposed 117 million password hashes stored without salts.
What is LinkedIn?
This property is violated when a ransomware attack encrypts a hospital's files and prevents doctors from accessing patient records.
What is Availability?
In 2012, LinkedIn allowed 6.5 million of these to be retrieved and trivially cracked by rainbow table lookup.
What are unsalted, hashed passwords?
This category of malware hides its own presence and the presence of other malware from the operating system, often operating at the kernel level.
What is a rootkit?
This social engineering technique was used in the Twitter 2020 breach, where attackers called employees by phone impersonating IT staff.
What is Vishing?
The entry point attackers used in the 2013 Target breach.
What is a third-party HVAC vendor (Fazio Mechanical)?
Operating from inside an organization, this type of threat actor is particularly difficult to detect using perimeter security tools.
What is an insider threat?
This cryptographic protocol adds authentication to DNS responses via digital signatures, but does not provide confidentiality.
What is DNSSEC?
This model is used to describe the phases of a cyberattack, from reconnaissance through actions on objectives.
What is the Cyber Killchain?
A SQL injection payload that makes a WHERE clause always evaluate to true.
What is ' OR '1'='1 ?
The number of days between when a CVE was public with a released patch and the Equifax breach.
What is 78 days?
A weakness or lack of countermeasure that can be exploited by a threat.
What is a vulnerability?
An algorithm designed specifically for password hashing, is intentionally slow, and includes a built-in salt.
What is bcrypt?
In 2013, Target was the victim of this type of malware, after it was installed on their point-of-sale terminals.
What is a RAM scraper (or memory scraper / BlackPOS)?
A network-layer attack that sends a forged ARP reply to update a victim's MAC address table, redirecting their traffic through an attacker-controlled machine.
What is ARP cache poisoning?
This IoT malware infected cameras, DVRs, and routers that were using default credentials, building a botnet used in the Dyn DDoS attack.
What is Mirai?
This property is most directly compromised when an attacker intercepts a software update and inserts malicious code before it reaches the end user.
What is Integrity?
The key exchange protocol that allows two parties to agree on a shared secret over a public channel without transmitting the secret itself.
What is Diffie-Hellman?
This network of compromised devices under the control of a command-and-control server, was used in the 2016 Dyn DDoS attack.
What is a botnet?
The specific vulnerability class that is exploited when a user-supplied input is concatenated directly into a SQL query string without sanitization.
What is SQL injection (CWE-89)?
They were this age, making them the youngest individual charged in connection with the Twitter 2020 breach.
What is 17 years old?