Attack lecture #2 ppt
- 2. TOPIC ATTACK
- 3. DEFINITION: Attack is any attempt to destroy, expose, alter, disable, steal or gain unauthorized access to or make unauthorized use of an asset
- 4. ATTACK TYPES Passive Attack Active Attack Insider Attack Close-in Attack Phishing Attack Hijack Attack Spoof Attack Buffer Overflow Attack Exploit Attack Password Attack
- 5. PASSIVE ATTACK Passive attack attempts to take the information from the system and does not affect any system resources and its operations.
- 6. ACTIVE ATTACK Active attack attempts to change the system resources or affect their usual operations.
- 7. INSIDER ATTACK An insider attack involves someone from the inside, such as a disgruntled employee, attacking the network.
- 8. CLOSE – IN ATTACK A close-in attack involves someone attempting to get physically close to network components, data, and systems in order to learn more about a network.
- 9. PHISHING ATTACK In phishing attack the hacker creates a fake web site that looks exactly like a popular site. The phishing part of the attack is that the hacker then sends an e-mail message trying to trick the user into clicking a link that leads to the fake site. When the user attempts to log on with their account information, the hacker records the username and password and then tries that information on the real site.
- 10. HIJACK ATTACK In a hijack attack, a hacker takes over a session between you and another individual and disconnects the other individual from the communication. You still believe that you are talking to the original party and may send private information to the hacker by accident.
- 11. SPOOF ATTACK In a spoof attack, the hacker modifies the source address of the packets he or she is sending so that they appear to be coming from someone else. This may be an attempt to bypass your firewall rules.
- 12. BUFFER OVERFLOW ATTACK A buffer overflow attack is when the attacker sends more data to an application than is expected. A buffer overflow attack usually results in the attacker gaining administrative access to the system in a command prompt or shell.
- 13. EXPLOIT ATTACK In this type of attack, the attacker knows of a security problem within an operating system or a piece of software and leverages that knowledge by exploiting the vulnerability.
- 14. PASSWORD ATTACK An attacker tries to crack the passwords stored in a network account database or a password-protected file.
- 15. TYPES OF PASSWORD ATTACK Dictionary attack Brute-force attack Hybrid attack.
- 16. DEFINITIONS A dictionary attack uses a word list file, which is a list of potential passwords. A brute-force attack is when the attacker tries every possible combination of characters. A hybrid attack builds on the dictionary attack method by adding numerals and symbols to dictionary words
- 17. THANK U