信息安全导论思维导图

信息安全导论思维导图，主要内容有Buffer Overflow、Packet Sniffing&amp、SpoofingTcp Attacks、 DNS Attacks、Reverse Shell、Meltdow&Spectre、Race Condition、set-UlD。

信息安全导论

• Buffer Overflow
  • Stack Layout
  • How buffer overflow works
  • Countermeasures
• Packet Sniffing&Spoofing
  • How Packets Are Received
  • Packet Sniffing
  • Packet Spoofing
• Tcp Attacks
  • How the TCP Protocol Works
  • SYN Flooding Attack
  • TCP Reset Attack
  • TCP Session Hijacking Attack
• DNS Attacks
  • DNS Hierarchy,Zones,and Servers
  • DNS Query Process
  • DNS Attacks
  • Local DNS Cache Poisoning Attack
  • Remote DNS Cache Poisoning Attack
  • Reply Forgery Attacks from Malicious DNS Servers
  • Denial of Service Attacks on DNS Servers
  • Protection Against DNS Cache Poisoning Attacks
• Reverse Shell
  • Shell/Remote shell
  • File descriptor
  • Standard input and output devices
  • Redirecting standard input and output
  • How reverse shell works
• Meltdow&Spectre
  • Side Channels
  • CPU cache and use it as side channel
  • Meltdown attack
  • Spectre attack
  • A form of race condition vulnerability
• Race Condition
  • What is Race Condition
  • Race Condition Vulnerability
  • How to exploit the TOCTTOU type of race condition vulnerability
  • Countermeasures
• set-UID
  • The need for privileged programs
  • How the Set-UID mechanism works
  • Security flaws in privileged Set-UID programs
  • Attack surface
  • How to improve the security of privileged programs