Detecting Attacks on Data and Applications
Introduced
Vocabulary
| English | Meaning |
|---|---|
| accounting/əˈkaʊntɪŋ/ | In access management, recording and tracking account activity and resource use for audit or review. |
| honeypot/ˈhʌnɪpɒt/ | A monitored decoy resource intended to attract or reveal suspicious activity; accessing it is a signal to investigate, not universal proof of an attack. |
| data loss prevention/ˈdeɪtə lɒs prɪˈvenʃn/ | data loss prevention |
Watching the data
- Accounting 审计记录 logs who accessed what and when.
- A honeypot 蜜罐 is a fake valuable file — any access is a clear attack sign.
- Re-hashing a file reveals if it was altered.
Choosing detective controls
- Honeypots and hash checks are cheap.
- A data loss prevention (DLP) 数据泄露防护 service is powerful but costly.
- More sensitive data deserves closer monitoring.
A hash function gives a fixed-length fingerprint; any change to the data changes the hash
Explore
Match the log evidence to the attack
OR 1=1 = SQL injection;
Your subject
Loading subjects…
Exam dates
Pick one and the site follows you — notes, papers, videos and practice all open on it.