Attacks

Attacks

1. Active

   • Actively attempting to cause harm to a network or system
   • Type
     • Network Based
       • DDOS
         • use many computers to attack one only
         • flood network with useless traffic
         • Reduce QOS
         • Types
           • Resource Consumption attacks
           • Malformed packets attacks
         • Phases
           • First phase: the perpetrator compromises computers scattered across the Internet and installs specialized software on these hosts to aid in the attack.
           • Second phase: the compromised hosts (referred to as zombies) are then instructed through intermediaries (called masters) to commence the attack.
       • Spoofing
         • Pretend to be someone else
         • Types
           • Blinds spoofing attacks
           • Informed attacks
       • Session Hijacking
         • Steals user's session
         • Types
           • Ip-Spoofing
             • Web server apps
               • If timeout is too large, it leaves a window of opportunity for an attacker to potentially use a hijacked cookie or even predict a session ID number and hijack a user’s session
             • Web based apps
               • hijacking a user’s cookie, and use that cookie to access the user's session
       • MITM
         • Attackers sandwich themselves b/w user and server to steal info
     • Application Based
       • Application-based attacks are any attacks against the applications themselves
       • Buffer overflow attacks
         • The buffer is an area of temporary memory used by the program to store data or instructions.
     • Mixed Threat
       • Mixed-threat attacks are those that are comprised of both network- and application-based attacks.

2. Passive

   • the attacker is passively listening for something to occur, or trying to gather information.
   • Types
     • Vulnerability Scanning
       • act of checking a host or a network for potential services that can be attacked
     • Sniffing and eavesdropping
       • Sniffers can be used both for legitimate network management functions and for stealing information off a network.
       • Sniffers are virtually impossible to detect

3. Password

   • TYpes
     • Brute force
       • trying as many password combinations as possible until hitting on the right one.
     • Dictionary based
       • long lists of words of a particular language called dictionary files are searched for a match to the encrypted password.

4. Malicious code