Network Thingy

Network Thingy

1. Network attacks

   • Vulnerabilities
     • Malware
       • Malware, short for malicious software, is an umbrella term used to refer to a variety of forms of harmful or intrusive software, including computer viruses, worms, Trojan horses, ransomware, spyware, adware, scareware, and other malicious programs.
     • Trojan
       • A Trojan horse or Trojan is a type of malware that is often disguised as legitimate software. Trojans can be employed by cyber-thieves and hackers trying to gain access to users' systems. Users are typically tricked by some form of social engineering into loading and executing Trojans on their systems.
     • Man in the middle
       • In cryptography and computer security, a man-in-the-middle attack (MITM) is an attack where the attacker secretly relays and possibly alters the communication between two parties who believe they are directly communicating with each other.
     • Brute Force
       • Brute force (also known as brute force cracking) is a trial and error method used by application programs to decode encrypted data such as passwords or Data Encryption Standard (DES) keys, through exhaustive effort (using brute force) rather than employing intellectual strategies.
     • Data interception
       • When packets travel across a network, they are susceptible to being read, altered, or “hijacked.” Hijacking occurs when a hostile party intercepts a network traffic session and poses as one of the session endpoints.
     • Social Engineering
       • the use of centralized planning in an attempt to manage social change and regulate the future development and behaviour of a society.
     • SQL injection
       • SQL Injection (SQLi) refers to an injection attack where an attacker can execute SQL statements (also commonly referred to as a malicious payload) that control a web application's database server (also commonly referred to as a Relational Database Management System – RDBMS).
     • Ransomware
       • a type of malicious software designed to block access to a computer system until a sum of money is paid.
     • DDOS
       • A Distributed Denial of Service (DDoS) attack is an attempt to make an online service unavailable by overwhelming it with traffic from multiple sources
     • Phishing
       • Phishing is the attempt to obtain sensitive information such as usernames, passwords, and credit card details (and money), often for malicious reasons, by disguising as a trustworthy entity in an electronic communication.
     • Data Sniffing
       • Packet sniffing is the act of capturing packets of data flowing across a computer network. The software or device used to do this is called a packet sniffer. Packet sniffing is to computer networks what wire tapping is to a telephone network.
     • Message Tampering
       • Tampering is the act of altering a message, or the delivery of a message, and using the altered message for a purpose other than what it was intended for