Unit 5: Network Attacks and Vulnerabilities

Comprehensive vocabulary flashcards covering network fundamentals, common network attacks, security vulnerabilities, risk categories, vulnerability scanning vs. penetration testing, and adversarial thinking mindsets from Unit 5.

Network

A group of connected devices that share information, resources, and data.

Host

Nodes that create or consume data, functioning to create, consume, and transmit data across a network.

MAC Address

A physical, permanent address assigned to a device when it is manufactured that does not change, providing a way for a host to be identified.

IP Address

A software address (Internet Protocol) that helps data find its path across a network and the internet, serving as an identifier for hosts.

Hub

A basic networking device that connects multiple computers together in a local area network (LAN) and sends data to everyone, which slows things down.

Switch

A networking device that reads the destination address of data and whispers it only to the correct device, making the network faster and more secure.

Router

A device that connects different networks (such as a home network to the internet), uses IP addresses to find the best path for data to travel, and often includes a firewall to protect against security threats.

Address Resolution Protocol (ARP)

A protocol that maps a device's known IP address to its permanent MAC address to ensure data reaches the correct physical machine.

Domain Name System (DNS)

A system that translates a human-readable name like google.com into the numerical IP address the computer needs to locate the website.

Wireless Access Point (WAP)

A networking device that acts as a bridge between a wired network and wireless devices, allowing devices to connect without cables.

ARP Poisoning

An attack where a hacker tricks devices on a local network into sending data to the wrong destination, allowing them to steal sensitive information, redirect users to fake websites, or launch DoS attacks.

MAC Spoofing

An attack where an adversary alters the MAC (Media Access Control) address of their device to impersonate another device on the network to gain unauthorized access or avoid detection.

Eavesdropping

An attack where a hacker secretly intercepts and listens to communication between two devices to steal sensitive information such as passwords, credit card numbers, or personal messages.

MAC Flooding

An attack where an attacker overwhelms a network switch with a massive number of fake MAC addresses in an attempt to capture sensitive data like passwords or confidential company information.

DNS Poisoning

An attack that tricks a computer into connecting to a fake website instead of the real one to steal personal information, install malware, or trick users into giving away passwords.

Smurf Attack

A cyberattack that crashes a network by using the network's own devices against it, overwhelming the victim's computer so that it slows down or crashes completely.

DDoS Attack

An attack where a hacker uses a massive army of computers to attack a single target all at once to silence websites or disrupt online services.

Credential Harvesting

A cyberattack where a hacker systematically steals usernames, passwords, or PINs to gain unauthorized access to user accounts, email services, banking profiles, or corporate networks.

Lack of Proper Firewalls

A network vulnerability characterized by an absence of traffic filtering entering or leaving the network, or access rules that are too permissive.

High Risk Vulnerability

A vulnerability severity category exemplified by a lack of proper firewalls, which allows attackers to reach internal systems directly, facilitates malware communication, and eases scanning or DoS attacks.

Compromised Devices

A vulnerability where a computer, phone, or IoT device is infected with malware or taken over by an attacker, leading to data theft, lateral movement, botnet participation, and spread of infection.

Moderate Risk Vulnerability

A vulnerability severity category exemplified by compromised devices on the internal network.

Physical Access to a Data Port

A vulnerability involving an unsecured wall jack, switch port, or router port that anyone in the building can plug into, allowing rogue devices to connect, sniff traffic, and access internal resources.

Low Risk Vulnerability

A vulnerability severity category exemplified by unmonitored physical access to a data port.

Signals Broadcasted Outside Physical Spaces

A vulnerability where Wi-Fi or other wireless signals reach beyond the building into parking lots or neighboring spaces, allowing outsiders to eavesdrop, capture handshakes, or set up evil-twin access points.

Lack of Authentication

A vulnerability where systems or services do not require users or devices to prove identity, allowing anyone to access data, settings, and services.

Open Network Port

A network port left listening that is not needed, or one exposed to the internet, giving attackers an entry point to probe and exploit the underlying service.

Compromised Network Encryption

A vulnerability involving weak, outdated, or broken encryption (e.g., WEP, old SSL/TLS) or stolen keys, allowing traffic to be intercepted, read, or tampered with in transit.

Unchanged Default Credentials

A vulnerability where devices still use factory-set usernames and passwords (such as admin/admin), allowing attackers to log in using publicly known defaults and gain full control.

Outdated Firmware

Router, switch, or device software that has not been patched, leaving known vulnerabilities exploitable for remote takeover, backdoors, or crashes.

Vulnerability Scanning

An automated process that checks systems, networks, or applications for known weaknesses (such as missing patches, open ports, and misconfigurations) and produces a report ranking them without exploiting them.

Penetration Testing

An authorized, simulated attack in which a skilled tester actively tries to exploit weaknesses to see how far an attacker could get and determine the real impact; it is mostly manual and goal-driven.

CVEs (Common Vulnerabilities and Exposures)

Standardized databases of known vulnerabilities that automated vulnerability scanners compare systems against during assessments.

Nessus

An automated vulnerability scanner tool used to check systems, networks, and applications for missing patches, open ports, and misconfigurations.

Metasploit

A widely used exploitation framework employed in penetration testing to validate and exploit discovered security weaknesses.

1

1

Defense in Depth

A comprehensive security program strategy that incorporates layered defenses, including regular authorization-based vulnerability scanning and penetration testing.

Adversarial Thinking

Looking at a system the way an attacker would, asking how it could be misused, bypassed, or broken instead of how it is supposed to work, while considering an attacker's goals, skills, and resources.

Ethics of Adversarial Thinking

Using attacker techniques only with permission and for protective purposes, including clear authorization and scope, respecting privacy, avoiding harm, and reporting findings responsibly.

Rules of Engagement

The formal authorization and defined scope agreed upon before security testing begins to protect individuals and organizations and maintain legal and professional trust.

White Hat

A security mindset and role characterized by authorized, defensive security actions designed to protect systems.

Gray Hat

A security mindset and role where an individual has no malicious intent but may act without authorization or permission.

Black Hat

A security mindset and role that involves malicious or unauthorized activities against systems and networks.

Red Team

A group of security professionals acting as the attackers in simulations and exercises to test defensive capabilities.

Blue Team

A group of security professionals acting as the defenders tasked with protecting systems, identifying threats, and responding to simulated or real-world attacks.