Question

In what type of attack against databases does an individual combine multiple pieces of information classified at a low level to reveal information classified at a higher level?

A. Aggregation
B. Cross-site scripting
C. Inference
D. SQL Injection

Answer 1

Inference is the type of attack where multiple pieces of information at a low level are combined to reveal information at a higher level.

Step-by-step explanation:

The attack against databases where an individual combines multiple pieces of information classified at a low level to reveal information classified at a higher level is called inference. Inference attacks take advantage of the relationships between different data points to infer sensitive information. For example, if an attacker knows that a certain user has two kids and two pets, and the database only shows the names of the pets, the attacker can infer the names of the kids based on the number of pets.