rences such as users exceeding their authorization,invalid file executions etc.
Question 116. What Is Signature-based Ids?
A signature-based IDS(also called Knowledge-based IDs) examines data traffic in search of patterns that match known signatures – that is,preconfigured ,predetermined attack patterns.
Question 117. What Is Lfm?
Log File Monitor(LFM) is an approach to IDS that is similar to NIDS. Using LFm the system reviews the log files generated by servers,network devices,and wven other IDSs. These systems look for patterns and signatures in the log files that may indicate an attack or intrusion is in process or has already succeeded.
Question 118. What Are Honey Pots?
Honey pots are decoy systems designed to lure potential attackers away from critical systems and encourage attacks against the themselves. These systems are created for the sole purpose of deceiving potential attackers. In Industry they are known as decoys,lures,and fly-traps.
Question 119. What Are Honey Nets?
When a collection of honey pots connects several honey pot systems on a subnet,it may be called a honey net.
Question 120. What Are Padded Cell Systems?
A Padded Cell is a honey pot that has been protected so that it cannot be easily compromised. In otherwords,a padded cell is a hardened honey spot..
Question 121. What Are The Advantages And Disadvantages Of Using Honey Pot Or Padded Cell Approach?
- Attackers can be diverted to targets that they cannot damage.
- Administrators have time to decide how to respond to an attacker.
- Attackers action can be easily and extensively monitored
- Honey pots may be effective at catching insiders who are snooping around a network.
- The legal implication of using such devices are not well defined.
- Honey pots and Padded cells have not yet been shown to be generally useful security technologies.
- An exper attacker,once diverted into a decoy system,may become angry and launch a hostile attack againt an organization’s systems
- Admins and security managers will need a high level of expertise to use these systems.
Question 122. What Are Foot Printing And Finger Printing?
One of the preparatory part of the attack protocol is the collection of publicly available information about a potential target,a process known as footprinting. Footprinting is the organized research of the Internet addresses owned or controlled by the target organization.
The next phase of the attack protocol is a second intelligence or data-gathering process called fingerprinting. This is systematic survey of all of the target organization’s Internet addresses(which are collected during the footprinting phase); the survey is conducted to ascertain the network services offered by the hostsin that range. Fingerprinting reveals useful information about the internal structure and operational nature of the target system or network for the anticipated attack.
Question 123. What Are Vulnerability Scanners?
Vulnerability scanners are capable of scanning networks for very detailed information.
As a class, they identify exposed usernames and groups, show open network shares, expose configuration problems, and other vulnerabilities in servers.
Question 124. Define Packet Sniffers ?
A network tool that collects copies of packets from the network and analyzes them Can be used to eavesdrop on the network traffic
To use a packet sniffer legally, you must be:
on a network that the organization owns under direct authorization of the owners of the network have knowledge and consent of the content creators (users).
Question 125. What Is Cryptography?.
Cryptography, which comes from the Greek work kryptos,meaning “hidden”,and graphein,meaning “to write”,is aprocess of making and using codes to secure the transmission of information.
Question 126. What Is Cryptoanalysis?
Cryptoanalysis is the process of obtaining the original message(called plaintext) from an encrypted message(called the ciphertext) without knowing the algorithms and keys used to perform the encryption.
Question 127. Define Encryption ?
Encryption is the process of converting an original mess