How information security attacks are classified
InfoSec Attacks
Information security attacks are unauthorized activities against the IT resources of government, corporate, or private so as to steal sensitive data, destroy them, or modify them. As more organizations allow their workers to access information from cell phones, systems become weak against information theft or complete destruction of the network or data.
Information systems are continuously facing different kinds of dangers which can cause various sorts of harms that may affect the important data and significant financial losses. Information security attacks can go from little misfortunes to whole data framework destruction. The impacts of different threats vary considerably: some influence the integrity or confidentiality of the information while others influence the accessibility of a framework. As of now, companies are having a hard time comprehending what the dangers to their data resources are and how to acquire the fundamental way to battle them which keeps on pose a challenge. The information security training is very useful to effectively handle such issues and to make plans for the future.
To enhance our comprehension of security attacks, we propose a classification model for the security threats that permits us to consider the impact of threats class rather than the impact of a threat as a threat may be different from previous experiences. We will discuss various security attacks classification criteria for the information security system and gives an overview of the most dangerous classification models. We characterize a security attack classification model for the information security system in order to propose a structural design that supports all threat classification standards and assists enterprises with executing the strategies for their information security.
The classification of InfoSec Attacks
Information security attacks can be classified into the below types:
Web-based attacks
These attacks are facing by the organization or individuals on a web application or a website. Below we are discussing some web-based attacks;
- Injection attacks
It is the attack wherein a few information will be injected into a web application to control the application and get the necessary data. Such as Code Injection, SQL Injection, XML Injection, log Injection, and so forth.
- Session Hijacking
It is a type of security attack over a protected network on a user session. To store the state and user sessions, web applications create cookies and by stealing those created cookies, an attacker can approach the entire data of the users.
- DNS Spoofing
DNS spoofing is a kind of system security hacking. Whereby information is brought into the cache of a DNS resolver making the name server return an erroneous IP address, occupying traffic to the system of an attacker or some other computer. The attacks of DNS spoofing can continue for a significant amount of time without being identified and can result in serious issues for security.
- Brute force
It is a kind of attack that utilizes an experimental technique. This assault produces too many guesses and authenticates them to get actual information like a personal identification number and user password. This assault might be utilized by lawbreakers to crack encrypted information, or by security experts to test the network security of an organization.
- Phishing
Another type of attack “Phishing”, that trying to get important data like credit card number and user login credentials. It happens when an assaulter is masquerading as a reliable body in electronic correspondence.
- Denial of Service
This is a type of attack that meant to make the resource of a network or server inaccessible to the users. This is achieved by overwhelming the target with traffic or giving it information causing a crash. It uses a single internet connection and a single system to attack a server.
Protocol attacks - It absorbs real resources from the server and is measured in a file.
Volume-based attacks - The aim is to saturate the attacked site's bandwidth and is measured in seconds.
Application layer attacks - Its function is to crash the Web server and is determined per second in a request.
- Dictionary attacks
This kind of attack stored and checked the list of a widely used password to get the original password.
- File Inclusion attacks
It is a sort of assault that permits an aggressor to access critical or unauthorized records that are accessible on the webserver or to execute malicious files on the webserver by utilizing the included functionality.
- URL Interpretation
It's a form of attack where we can modify certain parts of a web server and a URL can be built to provide web pages for which he is not allowed to access.
- Man in the middle attacks
It is another kind of attack that permits an attacker to captures the link among servers, clients, and functions as a bridge between them. Because of this, an attacker will have the option to insert, read, and modify the information in the intercepted connection.
System-based attacks
These are the attacks designed to compromise a network of computers or a computer. Some of the significant attacks on the system are as follows-
- Worm
It is a form of malware that primarily aims at replicating itself to propagate to uninfected computers. It functions just the same as the computer virus. Worms also come from email attachments which tend to come from trustworthy senders.
- Virus
This is a malicious type of software program that spread all through the files of a computer without user knowledge. It is a malicious software program that is self-replicating and replicates as introduced, by injecting copies of itself into other computer programs. It can also carry out instructions that harm the system.
- Backdoors
This approach bypasses the usual process of authentication. In order to access an application or operating system for troubleshooting or other purposes, a developer can create a backdoor.
- Trojan horse
This malicious program causes some changes that are not expected to the setting of the computer and unusual activity, even when the system is idle. It deceives the user of its actual aim. It has all the earmarks of being an ordinary application however when opened/executed some code will run out of sight.
- Bots
A bot (short for robot) is an automatic mechanism that communicates with other systems on the network. Many bots software run automatically, while others execute commands only when relevant input is received. Crawler, malicious bots, and chatroom bots are common examples of bots program.