Information Security

An active attack involves modifying data or gaining unauthorized access to resources, which can cause significant damage. Passive attacks, by contrast, only involve monitoring or eavesdropping on data.

Steganography is the practice of concealing a file, message, image, or video within another file, message, image, or video. It differs from encryption, which makes data unreadable.

Enumeration is the process of extracting information from a target system, such as usernames, machine names, network resources, and services. It is a key step in the reconnaissance phase of an attack.

Clickjacking is a malicious technique where an attacker tricks a user into clicking on a hidden or transparent element on a webpage. This action is performed on behalf of the user on a different site.

A Man-in-the-Middle (MitM) attack occurs when an attacker secretly intercepts and relays messages between two parties who believe they are communicating directly. This allows the attacker to read, send, or modify data.

Impersonation is a social engineering technique where an attacker pretends to be someone else, such as a valid user or an authority figure, to gain unauthorized access to information or systems.

Using pop-up windows to deceive users is a computer-based social engineering attack. It relies on software interfaces to trick the user into providing sensitive information.

The security triangle suggests that as you decrease security, systems often become easier to use and more functional, as restrictive security measures are removed.

Ethical hacking involves authorized attempts to identify and fix security vulnerabilities in IT systems, helping organizations protect their assets from malicious actors.

ISAKMP (Internet Security Association and Key Management Protocol) policies require five parameters: Encryption, Hash, Authentication, Group (Diffie-Hellman), and Lifetime.

3DES (Triple Data Encryption Standard) is a symmetric-key block cipher used to encrypt data, which provides confidentiality by ensuring that only authorized parties can read the information.

Interesting traffic is typically identified using an access control list (ACL) that specifies which source and destination IP addresses or subnets should trigger the VPN tunnel.

Integrity ensures that the data has not been altered in transit. This is typically verified using hashing algorithms like HMAC-MD5 or HMAC-SHA.

An ISAKMP policy defines the security parameters (encryption, hash, authentication method, Diffie-Hellman group, and lifetime) that two peers agree to use to establish a secure management tunnel (Phase 1).

ESP (Encapsulating Security Payload) and AH (Authentication Header) are indeed the two primary security protocols used within the IPsec framework to provide confidentiality, integrity, and authentication.