Device Vulnerabilities and Attacks
Introduced| English | Meaning |
|---|---|
| embedded computer/emˈbedɪd kəmˈpjuːtə/ | A computer built into a larger device to perform specific monitoring or control functions. |
| Internet of Things/ˈɪntənet ɒv θɪŋz/ | Internet of Things |
| virus/ˈvaɪrəs/ | Malicious software that replicates by attaching to or modifying other files or programs. |
| worm/wɜːm/ | Malicious software that copies itself between systems without needing to attach to another program. |
| ransomware/ˈrænsəmweə/ | Malicious software that blocks access to data or systems and demands payment, often by encrypting files. |
| remote access trojan/rɪˈməʊt ˈækses ˈtrəʊdʒn/ | remote access trojan |
| unpatched software/ʌnˈpætʃt ˈsɒftweə/ | Software that has not received an available update correcting a defect or vulnerability. |
Kinds of device
- A device is any computer: server, laptop, phone, or embedded computer 嵌入式计算机.
- Everyday embedded devices are Internet of Things (IoT) 物联网 devices.
- IoT runs everything from water pumps to washing machines.
Types of malware
- A virus 病毒 needs a user to open a file; a worm 蠕虫 spreads by itself.
- Ransomware 勒索软件 encrypts your files for money; a rootkit hides in the OS.
- A remote access trojan (RAT) 远程访问木马 gives remote control.
Common device vulnerabilities and the attacks that use them
Name the malware from its behaviour
A worm self-spreads; a virus needs a user; ransomware encrypts for money; a rootkit hides.
Which malware spreads WITHOUT any user action?
Difficulty 1/5 · 100 coins + a small bonus on first completion today
A worm self-spreads; a virus needs a user.
Malware that encrypts your files and demands payment is...
Difficulty 1/5 · 100 coins + a small bonus on first completion today
Ransomware encrypts for money.
Software with no recent security update installed is called ____ software.
Difficulty 1/5 · 100 coins + a small bonus on first completion today
Unpatched software has open, known holes.
Which malware behaviours match their names? (Choose all)
Difficulty 2/5 · 140 coins + a small bonus on first completion today
A worm self-spreads; it does NOT need a user.
Rating device risk
- Adversaries exploit unpatched software 未打补丁的软件 and weak passwords.
- High: an unpatched server with a critical flaw.
- Low: a laptop with one unused open port.
Do not confuse a virus with a worm. A virus needs a person to run an infected file; a worm spreads on its own with no human action. The self-spreading is exactly what makes worms so dangerous.
An internet-connected thermostat is an example of an IoT device.
Difficulty 1/5 · 100 coins + a small bonus on first completion today
Everyday embedded devices are IoT.
Ransomware locks a hospital's files and demands payment for the decryption key. Because patient care depends on those files, availability is destroyed — this is why an unpatched hospital server is rated a high risk.
A device is any computer, including IoT. Learn malware by its trait: virus needs a user, worm self-spreads, ransomware encrypts for money, rootkit hides. Rate risk high for an unpatched critical device, low for a low-value one.