Security violation Methods

Duration: 3 min

This video lesson is available to enrolled students.

Return to /learn/COGNIZANT-PREPARATION/operating-systems/security/access-control-models/asset-security-violation-methods after enrolling

Inside: a video lesson and guided study material.

Module outline

  1. Communication Round: Vocabulary, Subject Verb Agreement (Verb Noun Agreement), Tenses, Comprehension / Reading Comprehension / Unseen Passages (Critical Reasoning) (Paragraph Questions), Cloze Test (Cloze Passage), Sentence Correction (Error Correction), Sentence Completion (Fill in the blanks), Sentence Re-arrangements (Para Jumbles) (Narrative Sequencing), Direct and Indirect Speech, Active Passive Voice (Voice), Verbal Analogy (Word Based Analogy), Articles, Preposition, Conjunction, Sentence Construction, English Writing Ability, Communication Assessment
  2. Quantitative Aptitude: Ratio and Proportion (Ratios), Divisibility Rules, Data Interpretation, Mixture and Alligation, Permutation and Combination, Logarithm, Number System, HCF LCM, Speed Time and Distance, Percentage, Average, Powers and Exponents (Surds and Indices), Time and Work, Mensuration and Geometry, Age Problems, Pipe and Cistern, Probability, Profit and Loss, Simple Interest and Compound Interest, Algebra
  3. Analytical and Logical Reasoning: Series (Number and Letter Series) (Numerical Relations and Reasoning), Coding Decoding, Data Sufficiency, Non Verbal Reasoning (Spatial Aptitude) (Spatial Reasoning) (Visual Reasoning), Directions (Direction Test), Ranking, Order and Sequence, Deductive and Inductive Reasoning (Logical Deduction and Induction) (Prepositional Reasoning), Selection Decision Table (Decision Making), Logical Sequence Of Words, Puzzle Solving (Puzzles), Syllogisms, Seating Arrangements, Calendar, Clock, Blood Relations, Cubes & Dices, Venn Diagram, Analytical Reasoning (Counting Figures Reasoning)
  4. Cognizant Gaming Aptitude: Gamified / Game Based Aptitude
  5. Java (Cluster 1): Java
  6. ANSI SQL MySQL (Cluster 1,2,3): SQL
  7. HTML, CSS, JavaScript (Cluster 1,3): HTML, CSS, JavaScript
  8. Python (Cluster 2): Python for Placements by Yash Sir
  9. Cloud Fundamentals (Cluster 2): Emerging Tech Trends
  10. C# (Cluster 3): C#
  11. OOPs: Object Oriented Programming (OOPS)
  12. Technical Assessment (Coding): Coding Questions by Yash Sir, C Programming by Yash Sir, Programming in C++, Pseudo Codes
  13. Data Structures: Introduction to DS, Array, Stack, Queue, Linked List, Tree, Graphs, Hashing
  14. DBMS: Basics of DBMS, ER Diagram, Relational Model & Functional Dependencies, Keys & Integrity Constraints, Normalization (1NF - BCNF), Decomposition Properties & 4NF, File Organization & Indexing, Relational Algebra, Relational Calculus, Transaction Management, Concurrency Control, Database Recovery, ORDBMS, Database Security & Authorization, Query Processing & Optimization, Enhanced Data Models, Data Warehousing & Mining, Big Data Systems, NoSQL
  15. Operating Systems: Introduction to OS, Process Management, CPU Scheduling, Process Synchronization, Deadlock, Threads & Process Creation, Memory Management, Virtual Memory, Disc Scheduling, File Management, Windows OS, Linux OS, Security, Distributed Systems, Virtual Machines
  16. Computer Networks: Introduction to CN, Data Communication, DLL: Access Control, DLL: Flow Control, DLL: Error Control, DLL: Framing, Data Link Layer - Ethernet, Net Layer: IPv4 & Proto, Net Layer: IP Addressing, Net Layer:Routing Protocol, Transport Layer Services, TL: Congestion & UDP, Application Layer, Hardware basics, Network Security, Mobile Technology, Cloud Computing and IoT, Cyber and Info Security
AI summary & chapters

AI Summary

An AI-generated summary of this video lecture.

The video presents a lecture on 'Security Violation Methods' using a digital whiteboard. The instructor first introduces a list of five common attack types: Masquerading, Replay attack, Man-in-the-middle attack, and Session hijacking. For each method, a brief definition is provided, such as 'Masquerading (breach authentication)' and 'Replay attack (as is or with message modification)'. The instructor then proceeds to draw diagrams to visually explain the 'Man-in-the-middle attack' and 'Session hijacking'. The diagrams depict a sender (A) and receiver (B), with the attacker (C) positioned to intercept or manipulate the data flow, illustrating how an unauthorized party can masquerade as a legitimate user or intercept an established session to bypass authentication.

Chapters

  1. 0:00 – 2:00 00:00-02:00

    The video opens with a presentation slide titled 'Security Violation Methods'. The slide lists five attack types: Masquerading (breach authentication), Replay attack, Replay attack (as is or with message modification), Man-in-the-middle attack, and Session hijacking. The instructor begins by explaining the first method, Masquerading, which involves pretending to be an authorized user to escalate privileges. The instructor then moves to the second method, Replay attack, which involves intercepting and re-sending a valid data transmission to gain unauthorized access. The instructor's handwritten notes appear on the screen, including the word 'Compulsory' and a diagram of a sender (A) and receiver (B).

  2. 2:00 – 3:13 02:00-03:13

    The instructor continues to explain the 'Man-in-the-middle attack' and 'Session hijacking'. A diagram is drawn to illustrate the 'Man-in-the-middle attack', showing an attacker (C) positioned between a sender (A) and a receiver (B), who can intercept and modify messages. The instructor then draws a diagram for 'Session hijacking', showing an attacker (C) intercepting an already-established session between A and B. The instructor explains that in this attack, the intruder can masquerade as the sender or receiver to bypass authentication. The on-screen text for 'Session hijacking' is 'Intercept an already-established session to bypass authentication'. The instructor uses a digital pen to draw the diagrams and write the explanations on the whiteboard.

The lecture systematically introduces and explains five key security violation methods. It begins with a textual definition of each attack type, such as Masquerading and Replay attack, and then uses visual diagrams to provide a deeper understanding of the more complex attacks like Man-in-the-middle and Session hijacking. The progression from text to diagrams effectively illustrates how an attacker can exploit communication channels to gain unauthorized access, emphasizing the importance of secure authentication and data integrity mechanisms.

Loading lesson…