IB Computer Science Topic A2.4.2 Common Network Vulnerabilities Revision Notes (HL)

IB Computer Science Topic A2.4.2 Common Network Vulnerabilities Revision Notes (HL) | RevisionDojo

Written by official IB examiners

Distributed Denial of Service (DDoS)

A DDoS attack aims to overwhelm a network or service by flooding it with traffic from multiple sources.
Mechanism:
1. Botnets: Attackers use networks of infected devices (botnets) to generate traffic.
2. Target Saturation: The target becomes unresponsive to legitimate users.
Example:
1. An e-commerce site is flooded with requests during a sale, causing it to crash.

Note

DDoS attacks can target any online service, from websites to gaming servers, making them a widespread threat.

Insecure Network Protocols

Protocols that lack encryption or authentication, making them vulnerable to interception.
Examples:
1. Telnet and FTP: Transmit data in plaintext, allowing eavesdropping.
2. HTTP: Lacks encryption, exposing sensitive information.
Risks:
1. Data Interception: Attackers can capture credentials and sensitive data.
2. Session Hijacking: Unauthorized access to active sessions.

Tip

Always use secure protocols like HTTPS or SSH to protect data in transit.

Malware

Malicious software designed to damage, disrupt, or gain unauthorized access to systems.
Types:
1. Ransomware: Encrypts files, demanding payment for decryption.
2. Spyware: Collects sensitive information without user consent.
Example:
1. A ransomware attack encrypts a company's files, halting operations until a ransom is paid.

Note

Malware can spread through email attachments, infected websites, or compromised software updates.

Note

There are many different types of Malware, it would be good to look at: Virus, Worm, Trojan Horse, Spyware, Adware, Ransomware, Rootkit, Keylogger, Botnet, Fileless Malware, Logic Bomb, Backdoor

Man-in-the-Middle (MitM) Attacks

An attacker intercepts and alters communication between two parties without their knowledge.

Nice try, unfortunately this paywall isn't as easy to bypass as you think. Want to help devleop the site? Join the team at https://revisiondojo.com/join-us. exercitation voluptate cillum ullamco excepteur sint officia do tempor Lorem irure minim Lorem elit id voluptate reprehenderit voluptate laboris in nostrud qui non Lorem nostrud laborum culpa sit occaecat reprehenderit

Definition

Paywall

(on a website) an arrangement whereby access is restricted to users who have paid to subscribe to the site.

anim nostrud sit dolore minim proident quis fugiat velit et eiusmod nulla quis nulla mollit dolor sunt culpa aliqua

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

Duis aute irure dolor in reprehenderit

Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Note

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam quis nostrud exercitation.

Excepteur sint occaecat cupidatat non proident

Nemo enim ipsam voluptatem quia voluptas sit aspernatur aut odit aut fugit, sed quia consequuntur magni dolores eos qui ratione voluptatem sequi nesciunt. Neque porro quisquam est, qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit.

Tip

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

Lorem ipsum dolor sit amet, consectetur adipiscing elit.
Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.
Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris.
Duis aute irure dolor in reprehenderit in voluptate velit esse cillum.

Unlock the rest of this chapter with a free account

Distributed Denial of Service (DDoS)

A DDoS attack aims to overwhelm a network or service by flooding it with traffic from multiple sources.
Mechanism:
1. Botnets: Attackers use networks of infected devices (botnets) to generate traffic.
2. Target Saturation: The target becomes unresponsive to legitimate users.
Example:
1. An e-commerce site is flooded with requests during a sale, causing it to crash.

Note

DDoS attacks can target any online service, from websites to gaming servers, making them a widespread threat.

Insecure Network Protocols

Protocols that lack encryption or authentication, making them vulnerable to interception.
Examples:
1. Telnet and FTP: Transmit data in plaintext, allowing eavesdropping.
2. HTTP: Lacks encryption, exposing sensitive information.
Risks:
1. Data Interception: Attackers can capture credentials and sensitive data.
2. Session Hijacking: Unauthorized access to active sessions.

Tip

Always use secure protocols like HTTPS or SSH to protect data in transit.

Malware

Malicious software designed to damage, disrupt, or gain unauthorized access to systems.
Types:
1. Ransomware: Encrypts files, demanding payment for decryption.
2. Spyware: Collects sensitive information without user consent.
Example:
1. A ransomware attack encrypts a company's files, halting operations until a ransom is paid.

Note

Malware can spread through email attachments, infected websites, or compromised software updates.

Note

There are many different types of Malware, it would be good to look at: Virus, Worm, Trojan Horse, Spyware, Adware, Ransomware, Rootkit, Keylogger, Botnet, Fileless Malware, Logic Bomb, Backdoor

Man-in-the-Middle (MitM) Attacks

An attacker intercepts and alters communication between two parties without their knowledge.

Definition

Paywall

(on a website) an arrangement whereby access is restricted to users who have paid to subscribe to the site.

anim nostrud sit dolore minim proident quis fugiat velit et eiusmod nulla quis nulla mollit dolor sunt culpa aliqua

Duis aute irure dolor in reprehenderit

Note

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam quis nostrud exercitation.

Excepteur sint occaecat cupidatat non proident

Tip

Lorem ipsum dolor sit amet, consectetur adipiscing elit.
Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.
Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris.
Duis aute irure dolor in reprehenderit in voluptate velit esse cillum.

A1 Computer fundamentals4 subtopics

A2 Networks4 subtopics

A3 Databases4 subtopics

A4 Machine learning4 subtopics

B1 Computational thinking1 subtopic

B2 Programming5 subtopics

B3 Object-oriented programming2 subtopics

B4 Abstract data types (HL only)1 subtopic

IB Computer Science Topic A2.4.2: Common Network Vulnerabilities Notes

A1 Computer fundamentals4 subtopics

A2 Networks4 subtopics

A3 Databases4 subtopics

A4 Machine learning4 subtopics

B1 Computational thinking1 subtopic

B2 Programming5 subtopics

B3 Object-oriented programming2 subtopics

B4 Abstract data types (HL only)1 subtopic

Distributed Denial of Service (DDoS)

Insecure Network Protocols

Malware

Man-in-the-Middle (MitM) Attacks

anim nostrud sit dolore minim proident quis fugiat velit et eiusmod nulla quis nulla mollit dolor sunt culpa aliqua

Duis aute irure dolor in reprehenderit

Excepteur sint occaecat cupidatat non proident

Unlock the rest of this chapter with a free account

Distributed Denial of Service (DDoS)

Insecure Network Protocols

Malware

Man-in-the-Middle (MitM) Attacks

anim nostrud sit dolore minim proident quis fugiat velit et eiusmod nulla quis nulla mollit dolor sunt culpa aliqua

Duis aute irure dolor in reprehenderit

Excepteur sint occaecat cupidatat non proident

Unlock the rest of this chapter with a free account