Words related to "Cyber threats and attacks (2)": OneLook

bluesnarfing

Unauthorized access to the information on a wireless device through a Bluetooth connection, often between phones, desktops, laptops, or PDAs.

bot herd

(Internet, computer security) A large collection of compromised systems exploited for malicious purposes.

BREACH

(computing) A particular security exploit against HTTPS when using HTTP compression, based on the CRIME exploit.

break the Internet

(computing, idiomatic, figuratively) To deliberately overwhelm a web server through a cyberattack such as a DDOS, such that the server goes offline or is in danger of doing so.

brute force

(computing) To break a password, encryption, or any other protection mechanism by brute force.

computer virus

(computing) A program which can covertly transmit itself between computers via networks (especially the Internet) or removable storage such as disks and USB drives, often causing damage to systems and data.

cross-site request forgery

(computer security) An exploit of a website where unauthorised commands are transmitted from a user that the website trusts.

cross-site scripting

(computer security) An exploit that involves tricking a victim into executing a malicious script in a target website.

cursorjacking

(Internet, neologism) The malicious practice of tricking a user into clicking a visual element they did not intend to click, by manipulating the cursor's apparent location.

dark traffic

(Internet) Traffic to a website that is miscategorized by analytics software because it lacks data points such as the origin of the users.

denial-of-service attack

(Internet) A type of network computer attack that attempts to render a particular service (e.g. web site) unavailable to its audience.

dictionary attack

(Internet) An attack that uses a list of words (from a dictionary) to try to guess passwords or decryption keys

directory traversal

(cybersecurity) An attack in which the attacker causes a system to move from an allowed path or directory to one which is meant to be private via path change commands.

drive-by download

(computer security, Internet) A download triggered by scripts etc. on a website, without prompting the user, usually for malicious purposes.

fraggle attack

(computing, security) A particular variation of the smurf attack, using UDP traffic bearing the victim's spoofed IP address sent to certain standard ports.

Heartbleed

(computing) A security bug in OpenSSL, where more data can be read than should be allowed, which was disclosed and fixed in April 2014.

(computer security) An exploit where the attacker makes the victim log into a system using the attacker’s credentials.

man-in-the-browser

(attributive, Internet) A form of Internet security threat, a proxy Trojan horse that infects a web browser and covertly modifies web pages or transactions.

persistent cross-site scripting

(computer security) A cross-site scripting attack where the malicious script is a permanent part of a web page.

reflected cross-site scripting

(computer security) A cross-site scripting attack where the malicious script is relayed to the victim in an e-mail or as a URL parameter.

rootkit

(computer security) A set of software tools used by a third party to gain unauthorized access to a computer system and control the system while concealing itself from the user.

self-XSS

(computer security) A cross-site scripting attack where the attacker uses social engineering to trick the victim into executing the malicious script.

session fixation

(computer security) An exploit where the attacker sets or finds out the victim's session identifier.

session hijacking

(computer security) A type of exploit where a victim’s session id is stolen, allowing the attacker to access a service the victim is logged into.

shatter attack

(computing, Microsoft Windows) A means of bypassing security restrictions between processes in a session by having a less privileged process inject code into the message loop of a more privileged one.

shellcode

(computing) A small piece of code, used as the payload of a virus or other malware, that launches a shell so that the attacker can control the compromised computer.

shoulder surfing

(chiefly computer security) The use of direct observation, such as looking over someone's shoulder at an ATM, in order to obtain information.

smurf attack

(computer security) A largely obsolete form of denial-of-service attack, involving broadcasting ICMP packets with the intended victim's IP address to a large computer network, causing the victim's computer to be overwhelmed by the response packets from the network.

Sybil attack

(computing) An attack that subverts a reputation system by forging identities in peer-to-peer networks.

synflood

(Internet) A denial-of-service attack in which the attacker sends a succession of SYN (synchronization) requests to the target system in an attempt to consume its resources and make the system unresponsive to legitimate traffic.

trojan

(computing) Malware that appears to perform or actually performs a desired task for a user while performing a harmful task without the user's knowledge or consent.

web shell

(computer security, Internet) A shell-like interface for issuing commands to a compromised server.

Note: Concept clusters like the one above are an experimental OneLook feature. We've grouped words and phrases into thousands of clusters based on a statistical analysis of how they are used in writing. Some of the words and concepts may be vulgar or offensive. The names of the clusters were written automatically and may not precisely describe every word within the cluster; furthermore, the clusters may be missing some entries that you'd normally associate with their names. Click on a word to look it up on OneLook.