|
|
Technical intrusions, as opposed to wetware intrusions, are what most hackers think of. They attempt to subvert: - system defaults
- system holes
- system bugs
- brute force (ie. password cracking)
The most powerful feature in today's world is that ability to attack remotely: - internet attacks
- The hacker can be in another country; these days with increased FBI counter-hacker activity, most attacks coming in from the Internet to U.S. organizations come from foreign companies.
- trojan attacks
- The hacker sends people files that when they run, attack the target and relay information out via e-mail or file transfer. CD-ROMs may have an 'autorun' feature that will activate simply by placing the disk in a drive. They can masquarade as games snail-mailed to someone or simply left behind in a parking garage that a curious person might pick up and take to their office.
- virus
- Today's viruses frequently contain trojan horses that communicate with the virus writer via the Internet.
| - fingerprinting (1)
Discovering version of system by sending weird data at it
- grind (0)
guessing passwords remotely
- Password theft (3)
Sometimes passwords can be stolen directly without having to crack them
- Port Scan (10)
How hackers find services that can be exploited.
- Bounce (0)
sending attacks through someone else
- Passthrough (0)
Passing input that is accepted at one layer down into a system that can't handle it.
- Metacharacters (3)
Passing input that is accepted at one layer down into a system that can't handle it.
- Spoofing (47)
pretending to be someone else
- Source Routing (8)
overriding Internet traffic routes
|
|
