DoS vs DDoS Attacks Explained: How Hackers Overwhelm Systems


HELLO FRIENDS

WELCOME TO MY CYPHER

   Guys, in this blog we are going to see about network based attacks which I have learned today and I am going to share how DoS and DDoS works and also about man in the middle attack let's get into the topic without blabbering.

Denial of service ( DoS )

     Denial of service is just a simple concept it will affect the availability factor that we have learned in a previous blog which is a part of the CIA triad, now your mind will raise a question about how it can affect that. let me explain it, actually attackers use a computer and internet connection to flood a target with request and it is easier to block.
To make it more clear here is an example, if you want to check the result of your exam through your university's website but it will load for eternity actually this will happen because every student requests at the same time for their results. This is how the dos attack works.

Distributed denial of service (DDoS)

    This is an upgraded variant of dos attacker don't use a single system in this, they will use botnet like the network of hijacked and infected computers or IOT device like smart cameras to flood the target simultaneously from multiple locations worldwide.
This can't be easier to stop because of the number of IP addresses, Stoping a single IP address can't stop the others.
But investigators us other ways to stop this

Botnet 

They don't just stop IP addresses, they would look for botnet to know where are the infected machines located and it's often traced through traffic analysis 
And the next one is the most important factor which is, 

The C2

  This C2 is nothing but command and control, even if the attacker used a number of machines to make traffic definitely they need a central server which will command the others to do that, we can think it as a head of mafia gang if we knock out the head the others will automatically stop right that's how it works.
And the last one is,

The PCAP files - packet capture

  It is the network log that shows the exact structure of the malicious traffic and it also  helps to identify the specific type of DDoS

Let's move into next topic 

Man in the middle attack - MITM

    Actually, we can figure out what it will be with its name yeah you guessed right.
This will intercept between two systems communicating, without their knowledge it alters the information from the middle.
For example, if you send a parcel to someone in another city with the confidence of it will reach as it is but someone had changed the parcel without you guys know this is how it works.

There are some common MITM technique

Evil twin

   The attacker set up a fake wi-fi hotspot with a legitimate name and we would usually connect with that, by this they can enter into our systems and our data will flow into attackers system.

ARP spoofing 

If there is a network in our area and the attacker sends a fake message to link their MAC address with the IP address of the router, by this all the traffic which are meant for router will goes to attacker first.

Session hijacking 

  Session hijacking is, if you are need to attend a meeting and an attacker steals your session cookie they can easily attend that meeting by impersonating you and also without needing your password and the system will also think that's you.

So that's it guys. We all get an overall idea about network based attacks, I hope you guys understand it well. And if there is any mistake I have made you can let me know in the comments.
If you want study guide to learn you can get from this site

                                   THANK YOU

Comments

Post a Comment

Popular posts from this blog

Day 2: Understanding the CIA Triad, AAA

Image
HELLO FRIENDS!! WELCOME TO MY CYPHERLOG Today I studied the fundamentals of cybersecurity - the CIA Triad and AAA Framework. by journaling this in this blog I pushed myself to be stay productive  it's really motivating me!! Let me break down what I learned in simple terms.   At first I have started with CIA Triad and AAA Framework actually this the basic foundation of cybersecurity so we need to understand it well to master it, as you thing its not an complicating topics because I too thought that, its just an simple topic which we can easily connect with our daily life, so let me explain it clearly. THE CIA TRIAD    CIA Triad is nothing but a combined term of three words which is CONFIDENTIALITY, INTEGRITY AND AVAILABILITY and we can call it as an three pillars of cybersecurity so let see how it is more important in cyber. CONFIDENTIALITY  CONFIDENTIALITY is, if you are authorized to the system or data like we can take our mobile or laptop as an example you're ...
Read more

Cryptography Basics: Encryption Types & Hashing Explained

Image
 HELLO FRIENDS WELCOME TO MY CYPHER LOG         Today I came up with a topic which I wondered about what it will be from the first year of my studies in cybersecurity, The cryptography.  In this blog we are going to un-wrap this topic and learn more about it. LETS GET INTO THE TOPIC CRYPTOGRAPHY     You may think that it can be difficult to learn but actually there's nothing like that because I too thought like that about this, if you still think it's difficult I will explain it Like you want.    Cryptography is encrypting data from a readable plain text to unreadable cipher text format. Cryptography is like a knife It has both advantages and disadvantages. Its purpose varies based on who uses it, if you want to use it to protect data it can keep it secure, On the other hand if an attacker uses it he can create a massive bad impact like implement the attack the ransomware. THE TWO MAIN TYPES OF CRYPTOGRAPHY     As I have mentio...
Read more

Cyber Security Day 4: Understanding Layered Security & Defence in Depth

Image
HELLO FRIENDS!! WELCOME TO MY CYPHER LOG Successfully I have learned continuously for three days without any procrastination and I am just feeling proud of myself,  I hope you guys too learn continuously without any distractions. Ok let's see what I have learned today,    In the last blogs we have seen about security controls in this blog we are going to dive into depth of defence in cyber security and also there is an architecture called zero trust, let's see how it works. Defence in depth    Security controls are just a single safety measure to prevent an attack but defence in depth are not like that as we can understand with the name itself it's controlling structure which will protect the asset from an attack layer by layer. And it has five layers.  If a company hosts a website they won't just rely on a single layer of security like five layers of controls Layer 1 is an external firewall that will automatically block the IP address which looks suspiciou...
Read more