🤔 What is a Security Attack? (Basic Idea)
A security attack is any action that:
Tries to steal data
Modify data
Disrupt services
Gain unauthorized access
📌 In simple words:
A security attack is an attempt to break security goals (CIA).
🧠 Simple Definition
📌 A security attack is a malicious activity that attempts to compromise the confidentiality, integrity, or availability of information or systems.
🎯 Why Do Attacks Happen?
Attacks are performed to:
Steal sensitive data 💳
Spy on communication 🕵️
Damage systems 💥
Cause service downtime 🚫
Gain illegal access 🔓
🧩 Main Classification of Attacks
Security attacks are broadly classified into:
1️⃣ Passive Attacks
2️⃣ Active Attacks
📌 This classification is VERY IMPORTANT for exams ⭐
🕵️ 1. Passive Attacks
👀 What is a Passive Attack?
A passive attack is one where:
Attacker only observes
No data is modified
No disruption is caused
📌 In simple words:
Attacker listens quietly without changing anything.
🎯 Goal of Passive Attacks
Steal information secretly
Violate confidentiality
🔍 Types of Passive Attacks
📡 a) Eavesdropping / Snooping
Attacker listens to network communication
Reads data packets silently
📌 Example:
Capturing passwords on public Wi-Fi
❌ Impact
Password theft
Privacy violation
📊 b) Traffic Analysis
Attacker observes:
Communication patterns
Data size
Frequency of messages
📌 Even if data is encrypted, patterns reveal information.
🧠 Example
Knowing when a company is most active
Guessing sensitive operations timing
⚠️ Key Features of Passive Attacks
Feature | Passive Attack |
|---|---|
Data Modification | ❌ No |
Detection | Difficult |
CIA Goal Broken | Confidentiality |
Examples | Eavesdropping |
📌 Passive attacks are hard to detect.
💣 2. Active Attacks
🔥 What is an Active Attack?
An active attack is one where:
Attacker modifies data
Disrupts communication
Causes system damage
📌 In simple words:
Attacker interferes directly with the system.
🎯 Goal of Active Attacks
Break integrity
Break availability
Cause damage
🔧 Types of Active Attacks
🎭 a) Masquerade Attack
Attacker pretends to be a legitimate user
Uses stolen credentials
📌 Example:
Hacker logs in using someone else’s password
❌ Impact
Unauthorized access
Data theft
🔁 b) Replay Attack
Attacker captures valid data
Re-sends it later to trick system
📌 Example:
Replaying login request packets
❌ Impact
Unauthorized transactions
Authentication bypass
✍️ c) Message Modification
Attacker alters data during transmission
📌 Example:
Changing bank transfer amount from ₹1,000 to ₹10,000
❌ Impact
Financial loss
Data corruption
🚫 d) Denial of Service (DoS) Attack
Attacker floods system with requests
Legitimate users cannot access services
📌 Example:
Website crash due to heavy fake traffic
🌐 e) Distributed DoS (DDoS)
Attack from multiple machines
Much more powerful
❌ Impact
Service downtime
Business loss
⚠️ Key Features of Active Attacks
Feature | Active Attack |
|---|---|
Data Modification | ✅ Yes |
Detection | Easier |
CIA Goals Broken | Integrity, Availability |
Examples | DoS, Masquerade |
⚖️ Passive vs Active Attacks
Feature | Passive | Active |
|---|---|---|
Modification | ❌ No | ✅ Yes |
Detection | Hard | Easier |
Damage | Low | High |
Examples | Eavesdropping | DoS |
🧠 Attack Impact on Security Goals
Attack Type | Confidentiality | Integrity | Availability |
|---|---|---|---|
Passive | ❌ | ✔️ | ✔️ |
Active | ✔️/❌ | ❌ | ❌ |
🛡️ How to Prevent Attacks (Preview)
Encryption 🔐
Authentication ✔️
Firewalls 🔥
IDS/IPS 🚨
📌 These will be covered in upcoming topics.
🧠 Memory Tricks
Passive = Peeping 👀
Active = Attacking 💥
DoS = Deny Service 🚫
⭐ One-Line Summary
🔹 Security attacks are classified into passive attacks that observe data and active attacks that modify or disrupt communication.