Hijacked Domains
Attackers compromised three country-code domains and changed DNS records, then got at least 12 web certificates for Google and YouTube names.
Key terms
AP Cybersecurity alignment
- 2.1.G.3A defense-in-depth strategy allows for resilience in data protection so when one security control is bypassed by an adversary, another security control may still prevent access to the data or system or limit the damage done to…Learning objective: Explain why a defense-in- depth security strategy is necessary to optimally protect an organization.
- 3.1.A.3A domain name system (DNS) poisoning attack is when an adversary pretends to be an authoritative name server (NS) and plants a fake DNS record on a DNS server to redirect browser traffic to a malicious website designed to…Learning objective: Identify common network attacks.
- 5.4.C.1Common asymmetric encryption algorithms include RSA and elliptic curve cryptography (ECC). Asymmetric algorithms are used in many applications, including digital signatures and digital certificates.Learning objective: Apply asymmetric encryption algorithms to encrypt and decrypt data.
AP Networking alignment
- 4.1.A.4When integrity is compromised, systems may contain false or inaccurate data. A breach of integrity can be identified by: • unauthorized data changes • inconsistencies in logs • unauthorized software installations • corruption…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.
- 4.2.A.2Network protocols are used for identifying devices and networks to ensure data are directed to the correct destination. • MAC addresses and ARP are used to identify devices on a local network. • IP addresses identify local and…Learning objective: Describe the purpose of common network protocols.
- 4.6.B.2Monitoring and alerting tools help ensure availability by enabling rapid detection of failures or suspicious activity.Learning objective: Identify ways to improve the reliability and availability of networked systems.