Information Security

SYN Flooding is a classic Denial of Service (DoS) attack that exhausts a server's resources by flooding it with TCP SYN requests without completing the handshake. It does not involve cryptanalysis, social engineering, or repudiation.

The TEAR DROP attack exploits a vulnerability in IP fragment reassembly. It sends overlapping or malformed IP fragments that crash or hang systems when they attempt to reassemble the packet.

Kerberos authentication relies heavily on timestamps to prevent replay attacks. If the clocks on the KDC, client, and server are not synchronized, tickets will be rejected because they appear to be expired or issued in the future.

Cryptanalysis is the science and practice of analyzing information systems to discover hidden aspects of the system, specifically studying methods for breaking encryption algorithms and ciphers. It is the counterpart to cryptography, which focuses on creating secure communication methods. Cryptogram refers to the encrypted text itself, steganography involves hiding messages within other content, and 'crptology' appears to be a typo.

SYN flooding attacks exploit the TCP three-way handshake mechanism where a client sends SYN, server responds with SYN-ACK, and client completes with ACK. The attacker sends many SYN packets but never completes the handshake, exhausting server resources. This attack does not target IIS or Netscape vulnerabilities specifically, and SCTP uses a four-way handshake which is not the target of SYN flooding.

Passwords should be stored in hashed form using a slow, salted hash function like bcrypt, Argon2, or PBKDF2. Hashing is one-way, so even if the password database is compromised, attackers cannot easily recover the original passwords. Encryption is reversible and less secure for password storage, and plaintext storage is a critical security failure. Modern systems never store passwords in plaintext.

Steganography is the practice of concealing messages within other messages, images, or objects so that the very existence of the hidden message is not apparent to casual inspection. Unlike cryptography which hides the content of a message, steganography hides the existence of the message itself. The word derives from Greek meaning 'covered writing'. Cryptography is about encrypting messages, not hiding their existence.

Buffer overflows in programs running with administrator/root privileges are most dangerous because they can lead to complete system compromise. When an administrator-level process is exploited, the attacker gains the same high privileges as that process, allowing full control over the system. Overflowing a normal user program limits the attacker's scope, and programs 'run by the attacker' or 'run by the remote user' are nonsensical distractors in this context.

Digital signatures DO provide protection from tampering through their integrity verification mechanism. When a document is digitally signed, any modification after signing causes the signature verification to fail, alerting the recipient that tampering occurred. The signature is based on a cryptographic hash of the document content, so even a single bit change invalidates the signature. This is a fundamental security property of digital signatures.

One-time pads are theoretically unbreakable if implemented correctly with truly random keys that are used only once and never reused. This assumes unlimited time and resources for proper key generation and distribution. DES and Triple DES have known vulnerabilities, and Blowfish, while strong, is not provably 100% secure.

PIN stands for Personal Identification Number, and PUK stands for PIN Unlock Key (also known as Personal Unblocking Key). Distractors misidentify PIN as "Private Identification Number" or PUK as "Private Unique Key" or "Personal Unlock Key," which are incorrect terms in mobile telecommunications.

BlueBugging, BlueJacking, and BlueSmacking are all documented Bluetooth attack vectors. BlueScolding is not a recognized Bluetooth attack. The name appears to be fabricated for this question.