IT Security/Threats/Attacks

This lesson covers attacks.

Objectives and Skills

Objectives and skills for the attacks portion of Security+ certification include:^[1]

Summarize various types of attacks.

• Man-in-the-middle
• DDoS
• DoS
• Replay
• Smurf attack
• Spoofing
• Spam
• Phishing
• Spim
• Vishing
• Spear phishing
• Xmas attack
• Pharming
• Privilege escalation
• Malicious insider threat
• DNS poisoning and ARP poisoning
• Transitive access
• Client-side attacks
• Password attacks
  • Brute force
  • Dictionary attacks
  • Hybrid
  • Birthday attacks
  • Rainbow tables
• Typo squatting/URL hijacking
• Watering hole attack

Multimedia

1. Watch YouTube: Man-in-the-Middle Attacks - CompTIA Security+ SY0-401: 3.2.
2. Watch YouTube: Denial of Service - CompTIA Security+ SY0-401: 3.2.
3. Watch YouTube: Replay Attacks - CompTIA Security+ SY0-401: 3.2.
4. Watch YouTube: Spoofing - CompTIA Security+ SY0-401: 3.2.
5. Watch YouTube: Spam - CompTIA Security+ SY0-401: 3.2.
6. Watch YouTube: Phishing - CompTIA Security+ SY0-401: 3.2.
7. Watch YouTube: Vishing - CompTIA Security+ SY0-401: 3.2.
8. Watch YouTube: Christmas Tree Attack - CompTIA Security+ SY0-401: 3.2.
9. Watch YouTube: Privilege Escalation - CompTIA Security+ SY0-401: 3.2.
10. Watch YouTube: Insider Threats - CompTIA Security+ SY0-401: 3.2.
11. Watch YouTube: Transitive and Client-side Attacks - CompTIA Security+ SY0-401: 3.2.
12. Watch YouTube: Password Attacks - CompTIA Security+ SY0-401: 3.2.
13. Watch YouTube: URL Hijacking - CompTIA Security+ SY0-401: 3.2.
14. Watch YouTube: Watering Hole Attack - CompTIA Security+ SY0-401: 3.2.

References