Attacks Types

Attacks Types

• 1.
  •ATTACKS
• 2.
  DOS AND DDOSATTACK • A denial-of-service attack overwhelms a system’s resources so that it cannot respond to service requests. A DDoS attack is also an attack on system’s resources, but it is launched from a large number of other host machines that are infected by malicious software controlled by the attacker.
• 4.
   There aredifferent types of DoS and DDoS attacks; the most common are TCP SYN flood attack, teardrop attack, smurf attack, ping-of-death attack and botnets Tcp syn flood attack Botnets
• 5.
   On Feb.28, 2018, GitHub—a popular developer platform—was hit with a sudden onslaught of traffic that clocked in at 1.35 terabits per second. If that sounds like a lot, that’s because it is—that amount of traffic is not only massive, it’s record-breaking.
• 6.
  SQL injection attack •SQL injection has become a common issue with database-driven websites. It occurs when a malefactor executes a SQL query to the database via the input data from the client to server. SQL commands are inserted into data-plane input (for example, instead of the login or password) in order to run predefined SQL commands. • *In order to protect yourself from a SQL injection attacks, apply least 0 privilege model of permissions in your databases. The code that is executed against the database must be strong enough to prevent injection attacks.
• 7.
  Eavesdropping attack • Eavesdroppingattacks occur through the interception of network traffic. By eavesdropping, an attacker can obtain passwords, credit card numbers and other confidential information that a user might be sending over the network. Eavesdropping can be passive or active: • Passive eavesdropping — A hacker detects the information by listening to the message transmission in the network. • Active eavesdropping — A hacker actively grabs the information by disguising himself as friendly unit and by sending queries to transmitters. This is called probing, scanning or tampering. • *Data encryption is the best countermeasure for eavesdropping.
• 8.
  MAN IN THEMIDDLE ATTACK • A MitM attack occurs when a hacker inserts itself between the communications of a client and a server. Here are some common types of man-in-the-middle attacks
• 9.
   Session hijacking Inthis type of MitM attack, an attacker hijacks a session between a trusted client and network server. The attacking computer substitutes its IP address for the trusted client while the server continues the session, believing it is communicating with the client. • A client connects to a server. • The attacker’s computer gains control of the client. • The attacker’s computer disconnects the client from the server. • The attacker’s computer replaces the client’s IP address with its own IP address and spoofs the client’s sequence numbers. • The attacker’s computer continues dialog with the server and the server believes it is still communicating with the client.
• 10.
  • A multinationbust on Tuesday nabbed 49 suspects spread throughout Europe. • They were arrested on suspicion of using Man-in-the-Middle (MiTM) attacks to sniff out and intercept payment requests from email. • As Europol detailed in a statement, the raid was coordinated by Europol’s European Cybercrime Centre (EC3) and Eurojust, led by Italian Polizia di Stato (Postal and Communications Police), the Spanish National Police, and the Polish Police Central Bureau of Investigation, and supported by UK law enforcement bodies.
• 12.
  Phishing attacks • Phishingattack is the practice of sending emails that appear to be from trusted sources with the goal of gaining personal information or influencing users to do something.
• 13.
  • Critical thinking— Do not accept that an email is the real deal just because you’re busy or stressed or you have 150 other unread messages in your inbox. Stop for a minute and analyze the email. • Hovering over the links — Move your mouse over the link, but do not click it! Just let your mouse cursor h over the link and see where would actually take you. Apply critical thinking to decipher the URL. • Analyzing email headers — Email headers define how an email got to your address. The “Reply-to” and “Return-Path” parameters should lead to the same domain as is stated in the email. • Sandboxing — You can test email content in a sandbox environment, logging activity from opening the attachment or clicking the links inside the email.
• 14.
  PASSWORD ATTACK • Passwordsare the most commonly used mechanism to authenticate users to an information system, obtaining passwords is a common and effective attack approach.
• 16.
  Yahoo • Date: 2013-14 Impact:3 billion user accounts Details: In September 2016, the once dominant Internet giant, while in negotiations to sell itself to Verizon, announced it had been the victim of the biggest data breach in history, likely by “a state- sponsored actor,” in 2014. The attack compromised the real names, email addresses, dates of birth and telephone numbers of 500 million users. The company said the "vast majority" of the passwords involved had been hashed using the robust bcrypt algorithm.
• 17.
  • Brute-force passwordguessing means using a random approach by trying different passwords and hoping that one work Some logic can be applied by trying passwords related to the person’s name, job title, hobbies or similar items. • In a dictionary attack, a dictionary of common passwords is used to attempt to gain access to a user’s computer and network. One approach is to copy an encrypted file that contains the passwords, apply the same encryption to a dictionary of commonly used passwords, and compare the results.