Information Security

An attack is an intentional act attempting to compromise security by exploiting weaknesses, while a vulnerability is a weakness or flaw in a system that could be exploited. They are fundamentally different concepts: one is the potential weakness (vulnerability), the other is the active exploitation attempt (attack).

OWASP (Open Web Application Security Project) is a global nonprofit foundation dedicated to improving software security. It operates as an open community with free resources, projects, and tools. The other options (cgisecurity, ha.ckers.org, securityfocus) are websites or organizations but not the primary worldwide free community OWASP represents.

Browser security settings are the primary defense against drive-by downloads. Setting your browser to at least 'medium' high security helps detect and block unauthorized downloads. Keeping browser software updated ensures you have the latest security patches. Modem indicator lights and surfing speed are not related to security.

Keeping your internet connection always on during file sharing increases security risks by exposing your system to potential intruders for longer periods. Safe file sharing requires disabling connections when not in use and using proper security measures. Always-on connections create vulnerability windows for unauthorized access.

Spoofing is a social engineering technique where attackers masquerade as legitimate or trusted sources to gain unauthorized access or steal sensitive information. Unlike sniffing (passive monitoring) or surfing, spoofing actively deceives systems by falsifying data sources.

Polymorphic viruses use various encryption algorithms and constantly change their encryption keys with each infection to evade detection by antivirus software. Companion Viruses (A) don't use encryption, Overwrite Viruses (C) simply overwrite file content, and File Infectors (D) attach to executable files without polymorphic encryption.

Trojan Horses are malicious programs that disguise themselves as legitimate software while creating backdoors for network intruders to access system information. Unlike worms which self-replicate, or macro viruses that infect documents, Trojans specifically focus on unauthorized access and data theft. Direct Action Viruses are a different category that infect files when executed.

Antivirus software primarily uses two methods: virus signature search (matching known malware patterns against a database) and behavioral heuristic algorithms (detecting suspicious activities by monitoring program behavior). Signature detection catches known threats, while heuristic analysis identifies potential new malware based on anomalous behavior patterns.

A virus hoax is a false warning about a non-existent computer virus that spreads through email chains, causing unnecessary panic. Unlike real viruses, hoaxes are purely social attacks that rely on human fear and credulity to propagate. Spoofing involves faking identities, hacking is unauthorized access, and spam refers to unsolicited bulk messages.

Cryptovirology is the study of cryptography from an attacker's perspective, including how malware can use cryptography (like ransomware encrypting files) and how to attack cryptographic systems. Kleptography is the study of stealing information securely using subliminal channels, cryptology is the broader field encompassing both cryptography and cryptanalysis, and cryptography is the practice of secure communication.

Kleptography is the study of stealing information securely and subliminally, typically through backdoors in cryptographic systems. Unlike cryptovirology (which uses cryptography for malicious attacks) or steganography (hiding existence of messages), kleptography focuses on covertly extracting information from secure systems.

A honeypot is a security mechanism set up to detect, deflect, or counteract attempts at unauthorized access to computer systems. It appears as an attractive target (like a vulnerable server) to lure attackers, allowing security researchers to study their methods and protect real systems. It is absolutely not for hacking systems or downloading content.