cybersecurity chapter 2

Interception

An unauthorized party gains access to an asset

without permission.

Interruption

An asset becomes lost, unavailable, or unusable,

affecting system operations.

Modification

An unauthorized party alters or tampers with an

asset

Fabrication

An unauthorized party creates counterfeit assets or

falsified data within the system.

Data Servers

where sensitive information is stored.

Application Servers

hosting software applications

Storage Systems

databases and file storage.

Operational Systems

systems controlling business or industrial processes.

Computer Networks

the communication infrastructure connecting systems.

Malware Attack

Malicious software designed to damage, disrupt, or gain unauthorized access to system.

Viruses

self-replicating programs that infect files or systems.

Worms

spread automatically across networks.

Spyware

secretly monitors user activity.

Ransomware

locks or encrypts data to demand payment.

Adware

displays unwanted advertisements.

Trojans

disguised as legitimate software to trick users

Phishing

is a social engineering attack where an attacker pretends to be a trusted contact to trick victims into sharing sensitive

information.

Password attacks

are attempts by attackers to gain unauthorized access by guessing or stealing passwords.

Brute-force attacks

trying all possible combinations until the correct password is found.

Dictionary attacks

using lists of common passwords or words to guess the password.

Keylogger attacks

secretly recording keystrokes to capture passwords.

Man-in-the-Middle (MITM) attack(eavesdropping attack)

The attacker intercepts communication between two parties, such as a client and a server, to steal or

manipulate data.

How MITM Attacks Work

1. The attacker scans for system and network vulnerabilities.

2. Phishing emails are sent to users, often containing fake service or bank

addresses.

3. The attacker intercepts and decrypts data to steal sensitive information.

SQL Injection attack

The attacker manipulates SQL queries to gain unauthorized access.targets database-driven websites.

How SQL injection attack works

• The attacker injects malicious code into input fields or URL parameters.

• The database executes the injected code, giving the attacker control over data

operations.

A Denial-of-Service (DoS)

attack aims to make a system or service

unavailable to legitimate users. Attackers flood a system with excessive traffic or

requests, preventing normal operation.

Insider Attack

occurs when someone within an organization misuses their authorized access to systems,

Common types of insider attack

1-data theft

2-sabotage

3-misuse of authorized access

4-assisting external attackers

Cryptojacking

occurs when attackers use someone else’s computer to mine cryptocurrency without the owner’s knowledge

Zero-Day Attack

occurs when attackers exploit a newly discovered vulnerability before a

patch or fix is available.

Watering Hole Attack

targets websites that are frequently visited by a specific group of users.