Additional Attacks
3 slides · 1 min read · Domain 3
Additional Attacks
Finally, these are other common types of attacks used.
Spoofing
Both types of spoofing are forms of a common security violation known as a manin-the-middle (MITM) attack. This occurs when an attacker routes information between two users through their own machine without the knowledge of the two individuals communicating. All shared information can be tracked and monitored by the attacker. When the attacker captures the information being sent, it can be altered, therefore compromising data integrity.
Pass-the-hash
A pass-the-hash attack is a technique where an attacker captures a password hash and passes it through for authentication and may gain lateral access to other networked systems.
Time of check / Time of use
If there are multiple threads of execution occurring at the same time, a time of check (TOC)/time of use (TOU) attack is possible. A TOC/ TOU attack takes advantage of the dependency of the timing of events that take place in a multitasking operating system.