1.0 Systems Security
1.1 Security Risks and Threats
The first portion of the CompTIA Security+ class deals with systems security and covers items such as viruses, trojans, worms, spam, rootkits, and other terms. To be successful in this portion of the class and test, you’ll want to know a few of the key terms that shape the first section:
Virus Rootkits
Trojan Adware
Worm Botnets
Spyware Logic bomb
Spam Privilege escalation
Even if you know the definitions, you’ll want to know the differences between the terms. For example, a virus and a trojan aren’t the same, and neither is a worm. A virus works by attaching to an existing file, usually an executable, or a program, and it spreads when the infected file is shared. A worm is in fact a virus and works similarly, but there isn’t any need for human interaction for the infection to spread. A trojan does not infect files and does not self-replicate. Instead, they work by appearing to be a legitimate program that, once opened and installed, will do damage.
Knowing the difference between adware and spyware is also a must. Spyware is installed unknowingly when someone downloads freeware. Adware often comes when you download freeware and ads are displayed when you use the software. They allow the software to produce some sort of income as well as to encourage people to buy the product. Spyware is very similar but it will track your surfing habits to show ads related to your activity. Spyware is intrusive and can open holes to be exploited.
Viruses, worms, trojans, botkits, and plenty of other threats are always on the rise. Most recently, there are plenty of security risks and threats that we all face. From phishing pages that draw spam to our emails and viruses sent through emails that spread when an infected link is clicked, with the internet booming, the risks and threats continue to as well. Most recently, the biggest worry seems to be those targeting social networking websites. There is plenty of spam on these websites and you’ll often time find plenty of links that are either spam links or links that are infected. The most notable virus to speak of in October was the Virus.Win32.Murofet virus that was known to infect PE files. The links that the virus created were made using an md5 hash and the end product was a biz, .org, .com, .net, or .info link with the string ending with /forum.
GetCertify4Less and GetCertified4Less
No comments:
Post a Comment