Common types of attack vectors

1.  Compromised credentials
2. Weak and stolen credentials
3. Malicious insiders
4. Misconfiguration
5. Vulnerabilities
6. Malware

An attack vector can be classified as either:

1. Active attack vector
2. Passive attack vector
   

Active attack vector

Active attack vectors affect the integrity and availability of information. An attacker tries to alter or modify a system through malware, exploiting vulnerabilities, man–in–the–middle attacks and ransomware.

In the figure below, an attacker captures the message from the sender and changes its contents before sending the misleading message to the receiver.

Active attacks are in the form of:

1. Interruption – An attacker tries to deny users access to the system
2. Modification – An attacker captures a message and alters its contents
3. Fabrication – An attacker inserts fake information, resources or services into the network
   

Types of Active Attacks

Masquerade

A threat actor or attacker impersonates a legitimate user to gain unauthorized access to network resources. The main goal is identity and data theft.

In the image below, Darth is sending a message to Alice that appears to be from Bob. Darth, who is an illegitimate user, is masquerading as Bob.

Repudiation

A user can deny having executed a certain action or initiated a malicious transaction that caused a loss. Repudiation can be by the sender or receiver.

For example, a student can use the school computer to access a malicious website causing a cyber–attack. The student then denies accessing the websites as he or she knows it is against school guidelines.

Replay

A threat actor eavesdrops on secure network communication, intercepts it then fraudulently delays or resends it to misdirect the receiver into doing what the hacker wants. In the image below, Darth (attacker) intercepts the message from Bob (sender) to Alice and changes its contents before redirecting it to the intended receiver Alice.

Denial of Service

An attacker prevents a legitimate user from accessing network resources such as a school management system or student portal. An attacker floods the server with traffic or sends an action through code to cause a crash.

In the image below, Darth (attacker) interrupts Bob, who is a legitimate user from accessing services provided by the server.

Passive attack vector

Passive attacks are a threat to data confidentiality. An attacker strives to gain access or gather information about the target without altering the system resources.

The figure below explains how a passive attack occurs. An attacker reads the message from a sender to a receiver without modifying its contents.

Types of Passive Attacks

Message Release

An attacker monitors the contents of data in transmission. The information could be in the form of a telephonic conversation, an e–mail message or a transferred file.

Traffic Analysis

Passive attacks can be conducted through various social engineering attacks

Dumpster diving

An attacker goes through abandoned computers, devices or trash bins to try and acquire information from them. To prevent this, always shred documents and format devices that are no longer in use.

Phishing

An attacker can use SMS, e–mails or web advert to try and trick a user into giving sensitive information or visit a malicious website.

Baiting

This involves luring a user with an offer such as branded corporate branded flash disks in exchange for private information.

Piggybacking / Tailgating

This is when an unauthorized person physically follows an authorized person into a restricted corporate area, for example, a building or server room.

Pretexting

An attacker tries to persuade a user into giving sensitive information by providing a fictional backstory. The image below shows examples of pretext social engineering.

Similarities between active and passive attack vectors

1. An attacker identifies a potential target
2. An attacker collects information about a target using social engineering, malware or phishing
3. Information acquired is used to identify possible attack vectors and create or use tools to exploit them
4. Attackers gain unauthorized access to the system and steal sensitive data or install malicious code
5. Attackers monitor the computer or network, steal information or use computing resources

Difference between Active and Passive attack vector