Question 1
4 marks
Defining zero-day exploits and man-in-the-middle attacks
- Networks
(a)
2 marks
- Define the characteristics of a zero-day exploit:
- A zero-day exploit targets an undisclosed security flaw or software bug in an application or operating system that is unknown to the vendor or developers.
- Because no vendor-released security patch or defensive signature exists prior to the attack, defenders have zero days of advance warning to neutralize the threat.
Mentor tip
Clarify that the vulnerability is unknown to the vendor, leaving systems defenseless against active exploitation before a patch is published.
(b)
2 marks
- Define a man-in-the-middle attack:
- A man-in-the-middle attack occurs when a hostile third party covertly positions themselves between two communicating endpoints to intercept, monitor, or alter data transmissions.
- Both legitimate parties believe they are exchanging messages directly with one another over an uncompromised channel.
Mentor tip
State both the covert interception of communications and the mutual ignorance of the two victims.
