4.1 Device Vulnerabilities and Attacks（设备弱点与攻击）

LO 4 · EK 19 ｜ 严格按大纲顺序学习

▶ 从第一个 EK 开始看课件（幻灯片，可翻页/全屏） 点击下方任意 EK 编号（如 4.1.A.1）也可直接进入对应课件页

学习目标 Learning Objectives

4.1.A Identify types of computing devices.

- [4.1.A.1](/ek/4.1.A.1) — Server computers are devices that provide one or more services to other computers (e.g., DNS, DH… - [4.1.A.2](/ek/4.1.A.2) — Personal computers are devices that are designed to be used by one person for work or recreation… - [4.1.A.3](/ek/4.1.A.3) — Handheld computers (also called mobile computers or information appliances) are smaller than per… - [4.1.A.4](/ek/4.1.A.4) — Embedded computers are devices that are part of a machine. Embedded devices have specific instru… - [4.1.A.5](/ek/4.1.A.5) — Everyday devices with embedded computers are often called Internet of Things (IoT) devices. Embe…

4.1.B Identify the type of malware used in a cyberattack. Bullet A rootkit is sophisticated malware that gets into the target computer’s operating system and can control nearly every aspect of the system, including making the rootkit itself invisible to detection.

- [4.1.B.1](/ek/4.1.B.1) — Malware is malicious software that can damage or destroy a device or network, or allow an advers… - [4.1.B.2](/ek/4.1.B.2) — Malware is often used as a tool to accomplish part of an adversary’s plan to achieve their ultim… - [4.1.B.3](/ek/4.1.B.3) — While most malware is a file or a collection of files, fileless malware is malicious code that l…

4.1.C Explain how adversaries can exploit common device vulnerabilities to cause loss, damage, disruption, or destruction.

- [4.1.C.1](/ek/4.1.C.1) — Adversaries can develop exploits for known vulnerabilities in software (including operating syst… - [4.1.C.2](/ek/4.1.C.2) — Adversaries can take advantage of weak authentication requirements by guessing a user’s password… - [4.1.C.3](/ek/4.1.C.3) — When systems don’t have a password on the basic input output system (BIOS) or unified extensible… - [4.1.C.4](/ek/4.1.C.4) — Adversaries can load malware onto an external drive, and if autorun is enabled, then a device wi… - [4.1.C.5](/ek/4.1.C.5) — Adversaries can leverage open ports to connect to a device.… - [4.1.C.6](/ek/4.1.C.6) — Adversaries can send malicious data to devices to disrupt them or attempt to take control of the… - [4.1.C.7](/ek/4.1.C.7) — Adversaries often attempt to install malware on a device to disrupt or control it. Devices lacki…

4.1.D Assess and document risks from device vulnerabilities.

- [4.1.D.1](/ek/4.1.D.1) — Risk from device vulnerabilities can come from unauthorized access or malware that allow an adve… - [4.1.D.2](/ek/4.1.D.2) — High risks from device vulnerabilities involve potentially compromising sensitive data or critic… - [4.1.D.3](/ek/4.1.D.3) — Moderate risks from device vulnerabilities can arise from weak authentication requirements or fr… - [4.1.D.4](/ek/4.1.D.4) — Low risks from device vulnerabilities are typically related to vulnerabilities that, if exploite…

---

← 返回单元 Unit 4