Question

Security Flaws in Windows 8 or Apple iOS

Locate a website or article that discusses a security flaw that exist in Windows 8 or Apple iOS. Discuss how the flaw is exploited and if there is a way to prevent or fix the flaw. Remember to include a link to the exact page or article, This should be in your words with less than 30% copied material.

Answer 1

Security Flaws in Windows 8:

• Windows 7 and Windows 8 Threats: There are currently fewer computers are using windows 8 compare to windows 10 and windows 7. In studies, it found that malicious vulnerability which was created for windows 7 are also works on Windows 8 to exploits it.
• Picture password: With windows, 8 launch Microsoft introduced windows user with a picture password.in picture password by drawing pattern on a picture we can unlock pc.Due to our human nature, we mostly put the pattern on the nose, face or on eyes, which is easily crackable.
• Fake anti-virus: In FAKEAV, we can see that it will show us fake scanning with fake results. with that fake results, it tells the user to download a fake antivirus.
• Bypass ASLR protection: ASLR(address space layout randomization) protects memory operations and defend against buffer overflow. by knowing the memory process location hacker can hack the system, but ASLR put the process in an unpredictable location. but in windows, 8 remote attackers can bypass ASLR by a specific vector.
• Security Chip: Windows 8 has a security chip known as a Trusted Platform Module. It has the ability to secure system, according to experts if chip compromised that it became easy to theft all data.
• Signature-based technology: signature-based technology identifies attack by checking its byte sequence in network traffic. windows defender on windows 8 is still based on signature-based technology. security researchers found that this technology is not able to protect against this age attacks. if a new attack comes in the market then this technology not able to detect that.because sign-based technology only works for known attackers.so it can detect a new attack which is dangerous.