Threats - Attacks

Security Attacks

A buffer overflow is another common type of attack against applications.

Access A type of attack that frequently uses multiple dictionaries, including foreign ones, to gain access to accounts, databases, servers, and/or network devices. Types of access attacks include man-in-the-middle, port redirection, buffer overflow, and password.

Backdoor Also known as a trapdoor, a planted program that executes to bypass security and/or authentication.

Botnet Software that spreads from hacked device to hacked device (called zombie computers or zombies) and that is under control of someone else

Brute force Repeated attempts to check all possible key combinations to gain access to a network device or stored material.

Dictionary A brute-force attack to try to determine a password or decryption key by trying different words found in a dictionary.

DoS (denial of service) A string of data/messages sent to overload a particular firewall, router, switch, server, access point, or computer in an attempt to deny service to other network devices.

DDoS (distributed denial of service) A group of infected computers attacking a single network device by flooding the network with traffic.

Man-in-themiddle (MITM) A technique in which a hacker inserts a device between a sender and a receiver so the device can receive the intended traffic. Access points, DHCP servers, and default gateways are commonly simulated in this type of attack.

Rainbow table A method of obtaining a password in a short amount of time by using a table that contains previously discovered hash values that are used to encrypt a password.

Reconnaissance A technique that involves attempting to gather information about a network before launching another type of attack. Tools used include port scanners, pings, and packet-sniffing programs.

Replay A technique in which a valid network message or certificate is re-sent, usually in an attempt to obtain logon information.

Smurf A technique that involves using Internet Control Message Protocol (ICMP) to ping a large amount of network traffic at a specific device to deny that device network access, ping a nonexistent device to generate network traffic, or ping all network devices to generate traffic in ICMP replies.

Spoofing A technique that involves sending an Ethernet frame with a fake source MAC address to trick other devices into sending traffic to a rogue device. Can be used in conjunction with a man-inthe-middle attack.

TCP/IP hijacking A technique in which a stolen IP address is used to gain access and/or authorization information from a network.

Vulnerability scanner A software program used to assess network devices to identify weaknesses such as unpatched operating systems, open ports, or missing/outdated virus-scanning software.

Zero day A type of attack that takes advantage of a vulnerability in a particular software application that is found by hackers before it is known/fixed by the software developer.

Zombie A device that has been hacked and is controlled by someone else or that carries out malicious tasks.