SSCP · Question #1078
A salami attack refers to what type of activity?
The correct answer is C. Committing computer crimes in such small doses that they almost go unnoticed. A salami attack is a type of computer crime where very small amounts of assets, often money, are stolen from a large number of transactions, making each individual theft almost imperceptible.
Question
A salami attack refers to what type of activity?
Options
- AEmbedding or hiding data inside of a legitimate communication - a picture, etc.
- BHijacking a session and stealing passwords
- CCommitting computer crimes in such small doses that they almost go unnoticed
- DSetting a program to attack a website at11:59 am on New Year's Eve
How the community answered
(44 responses)- A2% (1)
- B2% (1)
- C89% (39)
- D7% (3)
Why each option
A salami attack is a type of computer crime where very small amounts of assets, often money, are stolen from a large number of transactions, making each individual theft almost imperceptible.
Embedding or hiding data within legitimate files or communications is known as steganography, which is distinct from a salami attack.
Hijacking a session and stealing passwords describes a session hijacking or credential theft attack, which is not a salami attack.
A salami attack involves illicitly siphoning off tiny amounts of value, typically financial, from numerous sources, which individually are too small to notice, but accumulate into a significant sum for the attacker. This method exploits the fact that minor discrepancies often go unchecked, especially in large-volume transactions.
Setting a program to execute a malicious action at a specific future time or event is characteristic of a logic bomb, not a salami attack.
Concept tested: Salami attack definition
Topics
Community Discussion
No community discussion yet for this question.