Chapter 5 Key terms

address resolution protocol, Part of the TCP/IP protocol for determining the MAC address based on the IP address.

An attack that corrupts the ARP cache.

An attack that occurs when a process attempts to store data in RAM beyond the boundaries of a fixed-length storage buffer.

hijacking a mouse click.

An attack that uses the user’s web browser settings to impersonate that user.

An attack that injects scripts into a web application server to direct attacks at clients.

An attack that attempts to prevent a system from performing its normal functions by overwhelming the system with requests.

Distributed denial of service: An attack that uses many computers to perform a DoS attack.

An attack that uses publicly accessible and open DNS servers to flood a system with DNS response traffic.

An attack that substitutes DNS addresses so that the computer is automatically redirected to an attacker’s device.

An attack that occurs when a domain pointer that links a domain name to a specific web server is changed.

Mapping computer and device names to IP addresses.

An attack that introduces new input to exploit a vulnerability.

An attack that occurs when an attacker changes the value of a variable to by using an integer overflow.

Imitating another computer by means of changing the IP address.

Imitating another computer by means of changing the MAC address.

Man in the browser: An attack that intercepts communication between a browser and the underlying computer.

man in the middle: An attack that intercepts legitimate communication and forges a fictitious response to the sender.

An attack that exploits a vulnerability in software to gain access to resources that the user normally would be restricted from accessing.

An attack that makes a copy of the transmission before sending it to the recipient.

An attack in which an attacker attempts to impersonate the user by using the user’s session token.

Fake sites that are spelled similarly to actual sites (also called typo squatting).