Lecture

Cybersecurity: Vulnerabilities and Exploits

Graph Chat

Chat with Graph Search

Ask any question about EPFL courses, lectures, exercises, research, news, etc. or try the example questions below.

DISCLAIMER: The Graph Chatbot is not programmed to provide explicit or categorical answers to your questions. Rather, it transforms your questions into API requests that are distributed across the various IT services officially administered by EPFL. Its purpose is solely to collect and recommend relevant references to content that you can explore to help you answer your questions.

Description

This lecture covers the motivation, means, and attacks used by nation agents in cybersecurity, the definition of vulnerabilities and their exploitation, the process from vulnerability discovery to patch deployment, the Zerodium payout for various exploits, sectors of vulnerabilities in ICT, network attack surfaces, DNS poisoning, SQL injection, ransomware attacks, and the CWE Top 25-2020. It also discusses phishing attacks during crises like Covid-19, the human attack surface, and the Social-Engineer Toolkit for social engineering attacks.

Official source

Ontological neighbourhood

Computer engineering

Computer security: Information security

Related concepts (32)

Vulnerability (computing)

Vulnerabilities are flaws in a computer system that weaken the overall security of the device/system. Vulnerabilities can be weaknesses in either the hardware itself, or the software that runs on the hardware. Vulnerabilities can be exploited by a threat actor, such as an attacker, to cross privilege boundaries (i.e. perform unauthorized actions) within a computer system. To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness.

Network security

Network security consists of the policies, processes and practices adopted to prevent, detect and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, which is controlled by the network administrator. Users choose or are assigned an ID and password or other authenticating information that allows them access to information and programs within their authority.

SQL injection

In computing, SQL injection is a code injection technique used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker). SQL injection must exploit a security vulnerability in an application's software, for example, when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and unexpectedly executed.

Code injection

Code injection is the exploitation of a computer bug that is caused by processing invalid data. The injection is used by an attacker to introduce (or "inject") code into a vulnerable computer program and change the course of execution. The result of successful code injection can be disastrous, for example, by allowing computer viruses or computer worms to propagate. Code injection vulnerabilities occur when an application sends untrusted data to an interpreter.

Malware

Malware (a portmanteau for malicious software) is any software intentionally designed to cause disruption to a computer, server, client, or computer network, leak private information, gain unauthorized access to information or systems, deprive access to information, or which unknowingly interferes with the user's computer security and privacy. Researchers tend to classify malware into one or more sub-types (i.e. computer viruses, worms, Trojan horses, ransomware, spyware, adware, rogue software, wiper and keyloggers).

Related lectures (64)

Cybersecurity: Threat Modeling and Solutions

Explores cybersecurity fundamentals, threat modeling, real-world case studies, and digital forensics procedures.

Malware: Introduction

Introduces the basics of malware, its distribution, reasons for its rise, and taxonomy.

IT Security Challenges

Explores IT security challenges, Object Storage systems, website management transition, network security deployment, and project portfolio management at EPFL.

HTTP Desync: Request Smuggling Reborn

Explores HTTP request smuggling, a vulnerability to bypass security controls, with examples and defense strategies.

Adversarial Thinking: Reasoning as an Adversary