chapter twelve

12 Common Network Threats and Attacks

 

This chapter covers

  • Stages of a cyber attack
  • Types of threats
  • Threat Identification
  • Threat Prevention

As we have seen, due to their interconnected nature, networks are inherently susceptible to attacks. A single compromised device — whether due to a phishing email, a weak password, or unpatched software — can serve as a gateway for attackers to intercept or manipulate network traffic, move laterally across systems, and access sensitive data. These initial footholds often go undetected, enabling attackers to expand their reach undetected, which makes containment and remediation significantly challenging. This underscores the urgent need for robust, comprehensive security measures across all network components.

Attackers typically exploit the weakest link in a network’s defenses to bypass stronger protections. For instance, rather than targeting a well-protected server directly, they might compromise an employee’s device with a weak password and use it as a springboard to escalate privileges and infiltrate deeper into the network.

To effectively counter these threats, cybersecurity professionals must understand the mechanics of network systems and the tactics that attackers use to exploit them. This knowledge is critical for securing data in transit, protecting vital assets, and implementing proactive defense strategies.

12.1 What Are Network Threats and Attacks?

12.2 How Attacks Happen

12.2.1 Reconnaissance

12.2.2 Weaponization

12.2.3 Delivery

12.2.4 Exploitation

12.2.5 Installation

12.2.6 Command and Control (C2)

12.2.7 Actions on Objectives

12.3 Understanding Threats and Attacks

12.3.1 Malware

12.3.2 Scripting Attacks

12.3.3 Password Attacks

12.3.4 Social Engineering

12.3.5 Spoofing

12.3.6 On-Path Attacks

12.3.7 Denial of Service (DoS) Attacks

12.3.8 Side-Channel Attacks

12.3.9 Physical Attacks

12.3.10 Insider Threats

12.3.11 Advanced Persistent Threats (APT)

12.4 Defending Against Network Attacks

12.5 Preventive Network Controls

12.5.1 Firewalls

12.5.2 Endpoint Protection

12.5.3 Email and Web Application Filtering

12.5.4 Network Access Control

12.6 Detective Network Controls

12.6.1 IDS and IPS