|
Denial of Services
Commonly known as DoS, this attack prohibits an application from serving its
purpose. For example, a DoS on a web server would mean that the server can
no longer serve web pages to the Internet. DoS attacks usually take
advantage of a vulnerability not fixed by the administrators.
Misconfigurations
Today's applications are complex and need to be configured properly. Often
times a single misplaced setting can eventually compromise an entire system
or network. An example of a misconfiguration is not enabling password
lockout settings. If the password lockout is enabled, a system is protected
from most brute force attack methods. However, if it is not enabled, the
brute force method may have enough chances to find the correct password.
Password Attacks
Typically a dictionary type of attack where a wordlist is used to try to
brute-force a particular user's password. Given an infinite amount of time,
any password can be derived in this fashion.
Vulnerabilities
Vulnerabilities within an application are the result of programming errors.
Developers are not often "security minded". Therefore, when they code an
application, they pay more attention to making the application "work" rather
than making it "work securely".
|