Karteikarten
Types of Attacks
Karten in diesem Stapel (24)
- 1Eavesdropping Attack (Release of Message Contents)A hacker captures ("listens" to) network traffic.
a.k.a sniffing or snooping
Category: Reconnaissance Attacks - 2Data Modification Attack (Modification of Messages)A hacker alters data captured from network traffic without the sender or receiver knowing about it
- 3IP, MAC, DHCP Spoofing Attack (Masquerade)A hacker constructs an IP packet that appears to come from a valid address in the company intranet.
Category: Access Attacks - 4Password-Based AttacksA hacker discovers a valid user account
and uses it to...
- obtain lists of other users
- get information about the network
- change server/network configurations
- modify, reroute, or delete data - 5Denial-of-Service AttacksPrevents normal use of a computer
or network by valid users.
This is done by blocking traffic, crashing applications/services, or flooding a computer or network until it shuts down from overload. - 6Man-in-the-Middle AttackHackers position themselves between a source and destination in order to invisibly monitor, capture, and control the communication.
Category: Access Attacks - 7Compromised-Key AttackA compromised key is a secret key obtained by a hacker in order to gain access to a secured communication without the sender or receiver knowing about it.
- 8Sniffer AttackA sniffer is an application or device that can monitor and capture network traffic, and read any unencrypted packets.
Category: Reconnaissance Attacks - 9Password AttackA hacker attempts to discover critical system passwords using various methods, including:
- social engineering
- dictionary attacks
- brute force attacks
Category: Access Attacks - 10Trust ExploitationA hacker uses unauthorized privileges to gain access to a system.
- 11Port RedirectionA hacker uses a compromised system as a base for attacks against other targets.
Category: Access Attacks - 12Buffer OverflowA hacker exploits the buffer memory and overwhelms it with unexpected values.
This usually renders the system inoperable, creating a DoS attack.
Category: Access Attacks - 13PretextingA hacker calls an individual and lies to them in an attempt to gain access to privileged data.
Example: claiming to need personal/financial data to confirm someone's identity
Category: Social Engineering Attacks - 14PhishingA malicious party disguises a fraudulent email as a message from a legitimate, trusted source.
Category: Social Engineering Attacks - 15Spear PhishingA targeted phishing attack tailored for a specific individual or organization.
Category: Social Engineering Attacks - 16TailgatingWhen an authorized person enters a secure location and a hacker slips in immediately behind them.
Category: Social Engineering Attacks - 17Something for Something (Quid pro quo)A hacker requests personal information from someone in exchange for something (like a free product).
Category: Social Engineering Attacks - 18BaitingA hacker leaves a malware-infected device such as a flash drive in a public location.
When someone finds it and plugs it into their computer, they are installing the malware.
Category: Social Engineering Attacks - 19Maliciously Formatted PacketsA maliciously formatted packet is forwarded to a host or application, causing some condition the receiving device is unable to handle, causing it to crash.
Example: errors the application can't identify
Category: DoS Attacks - 20Overwhelming Quantity of TrafficA network, host, or application is flooded with an enormous amount of data, causing the system to crash or run extremely slow.
Category: DoS Attacks - 21Ping of Death (legacy)An echo request in an IP packet larger than the maximum size (65,535 bytes).
Category: DoS Attacks - 22Smurf Attack (legacy)A large number of ICMP requests sent to various recipients with the spoofed IP of the target as the source address, causing all the recipients to send echo replies to the target's IP at the same time.
Category: DoS Attacks - 23TCP SYN Flood AttackAttacker sends many TCP SYN session requests with a spoofed source IP to the target. Target replies with a SYN-ACK packet, and waits for a responding ACK packet that never comes.
Category: DoS Attacks - 24Distributed DoS Attack (DDoS)A DoS attack originating from multiple coordinated sources (zombies in a botnet, controlled by a handler system).
Category: DoS Attacks