Mobile Security Attack Types Quiz
Uploaded by
naaz_pinuMobile Security Attack Types Quiz
Uploaded by
naaz_pinuCommon questions
Powered by AIRSA encryption can be targeted through mathematical attacks that exploit weaknesses in its number-theory foundations, timing attacks analyzing elapsed computational times, and brute force searches for key discovery. Each method aims to undermine the encryption's reliability by either breaking the encryption itself or obtaining private keys through indirect observation or calculation .
Attacks on mobile passcodes include smudge attacks, shoulder-surfing attacks, and advanced attacks, all of which exploit different vulnerabilities. Smudge attacks rely on analyzing residue on the screen to deduce passcodes. Shoulder-surfing involves observing the user entering their passcode from a close distance. Advanced attacks can include more sophisticated methods such as malware to intercept or guess passcodes .
Phishing techniques such as whaling and clone phishing are tailored to different targets. Whaling targets high-level executives with personalized attacks often leveraging business-related content. Clone phishing adapts legitimate emails to trick regular users by replicating known communications, often embedding malware. Both exploit trust and authority, adapting to the perceived importance and susceptibility of the target .
Public key cryptography involves separate keys for encryption and decryption—a public key to encrypt and a private key to decrypt. This contrasts with symmetric encryption, which uses a single key for both processes. The separation of keys in public key cryptography enables secure communications over insecure channels without the need for key sharing before communication .
2-factor authentication enhances security by requiring two different types of evidence to verify identity: typically something you have, know, or are. This reduces the risk posed by compromised credentials of one type, as an attacker would need to breach both factors to gain unauthorized access, providing a robust layer of security .
Physical biometrics involve static physical attributes like hand geometry and retina, whereas behavioral biometrics focus on actions like keystroke dynamics and gait. Physical biometrics are generally more consistent and harder to replicate, while behavioral biometrics can be influenced by external factors and may require continuous monitoring for authentication .
Signature-based methods rely on known attack patterns, making them ineffective against novel threats. Anomaly-based methods can identify unusual activities, but they may produce false positives by flagging legitimate behavior as malicious. Both methods require continuous updating and tuning to improve accuracy and relevance in changing threat landscapes .
Methods of DoS attacks include ping of death, which involves sending malformed or oversized packets; TCP-SYN flood, where attackers overwhelm resources by initiating many connections without completion; and browser crashing, targeting vulnerabilities to crash the web applications. Each method disrupts operations by exhausting resources or exploiting software vulnerabilities, preventing legitimate access .
Misuse or misconfiguration of firewalls can introduce vulnerabilities such as improperly blocked traffic, which could allow unauthorized access. Unplanned bottlenecks can hamper legitimate communication between networks. Additionally, reliance on firewalls without complementary security measures might provide a false sense of security .
The primary principles of information security are confidentiality, integrity, and availability. Communication is not included because it serves as a medium rather than a protective measure. These principles focus on safeguarding data by ensuring it is only accessible to authorized individuals, accurate and reliable, and readily available when needed .