You're reading from Certified Information Security Manager Exam Prep Guide Aligned with the latest edition of the CISM Review Manual to help you pass the exam with confidence

Product type Paperback

Published in Nov 2021

Publisher Packt

ISBN-13 9781801074100

Length 616 pages

Edition 1st Edition

Concepts

Information Security

Author (1):

Hemang Doshi

Preface

1. Section 1: Information Security Governance

2. Chapter 1: Information Security Governance FREE CHAPTER

3. Chapter 2: Practical Aspects of Information Security Governance

4. Section 2: Information Risk Management

5. Chapter 3: Overview of Information Risk Management

6. Chapter 4: Practical Aspects of Information Risk Management

7. Chapter 5: Procedural Aspects of Information Risk Management

8. Section 3: Information Security Program Development Management

9. Chapter 6: Overview of Information Security Program Development Management

10. Chapter 7: Information Security Infrastructure and Architecture

11. Chapter 8: Practical Aspects of Information Security Program Development Management

12. Chapter 9: Information Security Monitoring Tools and Techniques

13. Section 4: Information Security Incident Management

14. Chapter 10: Overview of Information Security Incident Manager

15. Chapter 11: Practical Aspects of Information Security Incident Management

16. Other Books You May Enjoy

Different attack methods

The CISM aspirant should be aware of the following methods and techniques for information system attacks:

Alteration attack: In this type of attack, alteration or modification of the data or code is done without authorization. Cryptographic code is used to prevent alteration attacks.
Botnets: Botnets are compromised computers, also known as zombie computers. They are primarily used to run malicious software for distributed denial of service (DDoS) attacks, adware, or spam.
Buffer overflow: A buffer overflow is also known as a buffer overrun. They are normally due to a software coding error, which can be exploited by an attacker to gain unauthorized access to the system. A buffer overflow occurs when more data is fed to the buffer than it can handle and excess data overflows to adjacent storage.
Due to this, the attacker gets an opportunity to manipulate the coding errors for malicious actions.
A major cause of buffer overflows is poor programming...

The rest of the chapter is locked