20) Network Attacks

Comprehensive vocabulary definitions covering malware types, network-based attacks, DNS vulnerabilities, and social engineering based on CompTIA Network+ N10-009 course notes.

Malware

Short for malicious software, any software intentionally designed to cause damage to a computer, server, client, or computer network.

Virus

A type of malicious software designed to spread to other computers by attaching itself to legitimate software and executing its code when the host software runs; typically requires user action.

File Infector Viruses

Viruses that attach themselves to executable files and spread to other executables when the program is run.

Macro Viruses

Viruses written in the macro language of applications, such as Microsoft Word, which spread through documents.

Boot Sector Viruses

Viruses that infect the master boot record of a hard drive to ensure they are executed when the computer boots up.

Worm

A type of malware that replicates itself to spread to other computers without needing to attach to an existing program or requiring user intervention.

Trojan

Short for "Trojan horse," a type of malware that disguises itself as legitimate software or is hidden within legitimate software to trick users into executing it.

Ransomware

Malicious software designed to block access to a computer system or encrypt files until a sum of money is paid, typically in cryptocurrency.

Spyware

A type of malware designed to gather data from a user or organization without their knowledge or consent, often collecting internet usage, login credentials, or surveillance data.

Rootkit

A clandestine computer program designed to provide continued privileged access to a computer while actively hiding its presence from administrators.

Logic bomb

A piece of code inserted into a software system that will set off a malicious function when specified conditions are met, such as a date, time, or specific command.

Distributed denial-of-service (DDoS)

A malicious attempt to disrupt normal traffic of a targeted server or network by overwhelming it with a flood of Internet traffic from multiple compromised systems.

Botnet

A network formed by multiple compromised systems, often infected with a Trojan, used by a perpetrator to launch massive attacks.

UDP Floods

A DDoS attack where the attacker overwhelms random ports on a targeted host with IP packets containing UDP datagrams.

SYN Floods

A type of DoS attack that targets the TCP three-way handshake to overwhelm a system and render it unable to respond to legitimate traffic.

Amplification Attacks

Attacks that exploit characteristics of certain protocols, like DNS, to magnify the amount of traffic sent to a target.

Reflected DDoS

A DDoS attack where an attacker forces third-party servers to direct traffic to a victim, often using IP spoofing.

VLAN Hopping

A network attack technique that exploits vulnerabilities to send packets from one VLAN to another, bypassing Layer 2 security measures.

MAC Flooding

An attack where a switch is overwhelmed with fake MAC addresses, causing it to enter fail-open mode and act like a hub, broadcasting traffic to all ports.

ARP Spoofing

A technique involving sending falsified ARP messages over a LAN to link an attacker's MAC address with the IP address of a legitimate device.

Domain Name System (DNS)

The internet's phone book; it translates human-readable domain names into numerical IP addresses.

DNS Spoofing (Cache Poisoning)

Corrupting the DNS cache with false information to redirect traffic from a legitimate website to a fraudulent one.

DNS Tunneling

The practice of encoding the data of other programs or protocols in DNS queries and responses, often used to exfiltrate data.

DNS Hijacking

Diverting queries to a malicious DNS server by compromising the server or modifying a victim device's DNS settings.

DNSSEC (DNS Security Extensions)

Security provisions added to DNS to ensure responses come from the correct source and have not been tampered with.

Rogue Devices

Unauthorized devices, such as access points or DHCP servers, connected to a network without permission.

Rogue DHCP

An unauthorized DHCP server that provides incorrect IP addresses to clients, potentially leading to on-path attacks.

Evil Twin

A malicious Wi-Fi access point that masquerades as a legitimate one by using the same SSID to deceive users.

On-path Attack

Formerly known as "Man-in-the-Middle," an attack where the attacker positions themselves in the communication path between two parties.

SSL Stripping

A form of on-path attack where an attacker downgrades a secure HTTPS connection to an unencrypted HTTP connection.

Social Engineering

Malicious activities accomplished through human interactions to trick people into breaking security procedures.

Dumpster Diving

Retrieving sensitive information like passwords or financial records from discarded materials or hardware.

Shoulder Surfing

Directly observing or using technology to watch someone enter sensitive information like PINs or passwords.

Tailgating

A physical security breach where an unauthorized person follows an authorized individual into a restricted area without consent.