Types of Attacks

Additional methods of attack

Password Attack:

An attempt to access password-secured devices, systems, networks, or data. Some forms of password attacks that you'll learn about later are...

  • Brute Force

  • Rainbow Table

Password attacks fall under the communication and network security domain.

Social Engineering Attack:

A manipulation technique that exploits human error to gain private information, access, or valuables. Some forms of social engineering attacks are...

Different forms of Social Engineering Attacks:
  • Phishing

  • Smishing

  • Vishing

  • Spear phishing

  • Whaling

  • Social media phishing

  • Business Email Compromise (BEC)

  • Watering hole attack

  • USB (Universal Serial Bus) baiting

  • Physical social engineering

Social engineering attacks are related to the security and risk management domain.

Physical Attack:

A security incident that affects not only digital but also physical environments where the incident is deployed. Some forms of physical attacks are...

  • Malicious USB cable

  • Malicious flash drive

  • Card cloning and skimming

Physical attacks fall under the asset security domain.

Adversarial Artificial Intelligence:

A technique that manipulates artificial intelligence and machine learning technology to conduct attacks more efficiently.

Adversarial artificial intelligence falls under both the communication and network security and the identity and access management domains.

Supply-Chain Attack:

Targets systems, applications, hardware, and/or software to locate a vulnerability where malware can be deployed. Because every item sold undergoes a process that involves third parties, this means that the security breach can occur at any point in the supply chain. These attacks are costly because they can affect multiple organizations and the individuals who work for them.

Supply-chain attacks fall under the security and risk management, security architecture and engineering, and security operations domains.

Cryptographic Attacks:

Affects secure forms of communication between a sender and intended recipient. Some forms of cryptographic attacks are...

  • Birthday

  • Collision

  • Downgrade

Cryptographic attacks fall under the communication and network security domain.

Last updated