Free Preparation Discussions
MENU
ISC2 CSSLP Exam - Topic 4 Question 106 Discussion
Topic #: 4
Which of the following types of signatures is used in an Intrusion Detection System to trigger on attacks that attempt to reduce the level of a resource or system, or to cause it to crash?
Following are the basic categories of signatures:
Informational (benign): These types of signatures trigger on normal network activity. For example:
ICMP echo requests
The opening or closing of TCP or UDP connections
Reconnaissance: These types of signatures trigger on attacks that uncover resources and hosts that are reachable, as well as any
possible vulnerabilities that they might contain. For example:
Reconnaissance attacks include ping sweeps
DNS queries
Port scanning
Access: These types of signatures trigger on access attacks, which include unauthorized access, unauthorized escalation of privileges,
and access to protected or sensitive data. For example:
Back Orifice
A Unicode attack against the Microsoft IIS
NetBus
DoS: These types of signatures trigger on attacks that attempt to reduce the level of a resource or system, or to cause it to crash. For
example:
TCP SYN floods
The Ping of Death
Smurf
Fraggle
Trinoo
Tribe Flood Network
Paris
3 months agoLudivina
3 months agoRebbecca
3 months agoLettie
4 months agoGearldine
4 months agoRodrigo
4 months agoTanja
5 months agoOzell
5 months agoRuth
5 months agoTawna
5 months agoMa
5 months agoVinnie
5 months agoCarylon
6 months agoJoana
6 months agoDewitt
6 months agoJodi
6 months agoSvetlana
6 months agoIra
6 months agoSharan
7 months agoCharlena
7 months agoElvera
7 months agoVerda
7 months agoAnabel
7 months agoLoren
8 months agoMarshall
8 months agoTrinidad
2 months agoKris
2 months agoJustine
3 months agoBernardine
3 months agoStevie
3 months ago