Chapter 1 - 3

Front 1

denial of service

Back 1

prevents the victim computer from accessing local or remote services or programs

Front 2

Man in the Middle (MIM)

Back 2

attacker is able to read messages between two victims

Front 3

Hijack

Back 3

attacker commandeers (takes over) the victims computers connection

Front 4

break-in

Back 4

attacker gains unauthorized access to the victim computers

Front 5

ping/UDP Flood

Back 5

excessive amount of ICMP packets

Front 6

SYN Flood

Back 6

sends bogus TCP connecton requests

Front 7

MAC Flood

Back 7

excessive amount of packets through a switch

Front 8

Distributed Denial of Service (DDoS)

Back 8

army of "slave" computers launch large bandwidth-flooding attacks

Front 9

Ping of Death

Back 9

over-sized ICMP packet

Front 10

Smurf

Back 10

ICMP packets to the broadcast IP address of a large subnet, send a barrage of response packets to the victim

Front 11

WinNuke

Back 11

"out-of-band/urgent" TCP packet

Front 12

Teardrop

Back 12

overlapping fragments

Front 13

Land

Back 13

ideentical source and destination IP

Front 14

ARP Poison (arp spoofing)

Back 14

fake address resolution packet to a victim which trick the victim coputer into sending its packets to the attacker

Front 15

ICMP Redirect

Back 15

fake message packets which alter the victims routing table

Front 16

DNS Spoofing

Back 16

fake domain name resoluton packets trick the victim computer into sending its packets to the attadker

Front 17

DNS Cache Poison

Back 17

fake domain name resolution to a victim resolver server

Front 18

Agressive exploits

Back 18

launched from the attacker against the victim

Front 19

Passive exploits

Back 19

victim connects to the attacker

Front 20

Buffer Overflow

Back 20

input more informatoin in memory than it was designed to hold

Front 21

Buffer Over Read

Back 21

read (view) more informatoin from memory than it was intended to give

Front 22

SMB Relay

Back 22

attacker relays credentials back to the victim to gain access

Front 23

SMB DoS

Back 23

malformed header to port 445

Front 24

Virus

Back 24

hostile progaram, imbeds itself in abother program and propogates itself

Front 25

Worm

Back 25

hostile program propogates without imbedding

Front 26

Trojan

Back 26

hostile program masquerading as a helpful program

Front 27

Spyware

Back 27

collects and sends information on users

Front 28

Adware

Back 28

downloads and displays advertisements

Front 29

Backdoor

Back 29

allows unauthorized access, bypassing the normal authentication procedures

Front 30

Key logger

Back 30

copies the user's keystrokes

Front 31

Rootkit

Back 31

covers his/her tracks

Front 32

Fork Bomb

Back 32

large number of processes

Front 33

Decompression bomb

Back 33

inflates or expands to an enormous size

Front 34

Dumpster diving

Back 34

victim trash bin

Front 35

Online Attack

Back 35

uses internet to gain the trust of the victim

Front 36

TCP Kill

Back 36

bogus reset packets to the victim

Front 37

SSL/SSHV1 MiM

Back 37

sends fake certificate with public key to the victim

Front 38

Dictionary

Back 38

encrypts a predetermined list of words until it finds matches

Front 39

Brute Force

Back 39

encrypts every possible combination of characters and symbolsuntil it finds a match

Front 40

Rainbow Tables

Back 40

precomputed table of encrypted (hashes)