CompTIA Security + Ch 4

Tesxt files placed on the client computer that store information about it, which include your browsing habits and credentials.

Tracking cookies are used by spyware to collect information about a web users activities.

Session cookies are used by attackers in an attempt to hijack a session.

When a process stores data outside the memory that the developer intended. This could cause erratic behavior in the application.

Security componet of Windows Vista, and 7 that keeps every user in standard user mode instead of as an admin with full admin rights.

The process of creating systems and applications, and the methodologies used to do so.

An in-depth code inspection procedure.

The best practices used during the life cycle of software development.

When random data is inputted into a computer program in an attempt to find vulnerabilities.

A type of vulnerability found in web applications used with session hijacking.

An attack that exploits the trust a website has in a users browser in an attempt to transmit unauthorized commands to the website.

A process that ensures the correct usage of data.

When a web script runs in its own environment for the express purpose of not interfering with other processes, possibly for testing.

Also known as the ../ (dot dot slash) attack is a method of accessing unauthorized parent directories.

An attack that is executed on a vulnerability in software before that vulerability is known to the creator of the software.

Prioritize threats to an application, based on their potential impact.