Security

 Various types of security attacks  Network attacks  DNS cache poisoning attack  It works by tricking a DNS server into accepting a fake DNS record that will point to a compromised DNS server. It then feeds you fake DNS addresses when you try to access legitimate websites.  Poisoned DNS cache Man in the middle attack  An attack that places the attacker in the middle of 2 hosts that think they're communicating directly with each other.  Session hijacking  Session is taken over by an attacker. A session starts when you log into a service. The attack relies on the attacker's knowledge of your session cookie, so it is also called cookie hijacking. Session hijacking is done by stealing user'...

Security Terms  CIA triad  CIA triad is the core aspect when designing security policy. Confidentiality  Measurement to prevent sensitive information from unauthorized access attempts.  Integrity Maintaining the consistency, accuracy and trustworthiness of data over its entire life cycle.  Data must not be changed in transit, and steps must be taken to ensure data cannot be altered by unauthorized people.  Availability  Information should be consistently and readily accessible for authorized parties. Basic terms used in security  Risk  The possibility of suffering a loss in the event of an attack on the system  Vulnerability Flaw in a system that could be exploited to compromise the system  0-day vulnerability is a vul...