Vulnerabilities by layer | Commondork

Vulnerabilities by layer

Posted August 29, 2008 at 7:04 pm in Vulnerabilities

This is a short list of network layers and their possible vulnerabilities/attack vectors.

Human	Social engineering, phishing, dumpster diving, shoulder surfing, scams, caller ID spoofing, poor policies

Application	Buffer overflows, XSS, malware, virii, worms, trojans, code exploits, application attacks

Presentation	Cleartext extraction/sniffing, NetBIOS enumeration, protocol attacks

Session	Session hijacking, SYN flooding, password attacks

Transport	Port scans, DoS attacks, service manipulation, flag manipulation

Network	IP attacks, ARP poisoning, MAC flooding, ICMP attacks, routing attacks

Data Link	Sniffing, MAC spoofing, WEP attacks

Physical	Wiretapping, interception, hardware hacks, lock picking, physical access attacks

Commentary

+

Add Your Comment

Your email address will never be shared or published.

asynchronous attack vectors C character count ciphers cipher text code obfuscation communication cross-site scripting cryptanalysis cryptography decryption defense in depth demilitarized zone dmz Encryption google javascript kernel layered approach layering letter frequency network Networking network models network stack obfuscation orange book OSI perl phishing PHP plain text Programming secure email stack substitution cipher symmetric synchronous TCP/IP transformations transforms trusted computer system evaluation criteria Vulnerabilities xss

WP Cumulus Flash tag cloud by Roy Tanck and Luke Morton requires Flash Player 9 or better.