Let us explore the main part of the fundamentals of cybersecurity, that is the types of attacks, there
are two types of attacks that attack and pursue attack.
In this lecture, we are going to learn passive attacks.
The Internet is full of risks whenever you go online, there is a possibility that you will encounter
a risk within that range of risks.
There are different types of computer threats with varying associations of damaging effects.
For example, some threats may damage or corrupt your installed operating system and force you to reinstall
it.
Another type may steal your credentials and save passwords.
Still, other threats may not be harming your PC.
Instead, they will track your online activities and invade your privacy.
Today, criminals are smarter than even before and malicious programs are more sophisticated.
Model malware can infect Target PC and remain undetected for a long time.
The advent of computing power makes it possible to crack difficult passwords in a fraction of seconds.
The motive behind the majority of cyberattacks nowadays is to damage your machine, but instead to steal
your money, to access your private information or acquire your login credentials.
Conceptually, cybersecurity risks can be divided into two categories that is facile and active in this
lecture will talk or passive attacks in passive attack and into the mind, a system and a network,
communications and scans for open borders and other vulnerabilities.
For example, they might explode an unpaid system or take advantage of an expired cert on a security
device.
Once the intruder has infiltrated the network, they can collect information in a couple of ways in
a footprinting password that the intruder will try to collect as much intelligence as they can to use
it later to target any attack.
An example is when an intruder records network traffic using a packet, and that is a tool such as Wireshark
for later analysis.
The two most common use cases of passu attacks are information discloser.
In this tape, an attacker will monitor an unpredictable communication medium like an encrypted mail
or telephone call, an intercepted for sensitive information traffic analysis in this day, and attack
commander's communication channels to collect a range of information, including human and machine identities,
locations of designing these types of encryption used if applicable, like even installing a key logger
is another sort of password that an intruder waits for the user to enter the credentials and records
them for later use.
Let us demonstrate traffic analysis.
Pasquotank, consider the scene here.
Bob and Alice are two best friends and Trudy is the interceptor.
Bob sends the message to Alice like Alice, it's me, Bob, how are you?
How are you?
But Trudy is reading all the messages to any kid and rising to like Wireshark.
Therefore, the privacy between Bob and Alice is hard to resist.
Well, now I know you are, Bob.
Even Alice is not aware of all the messages sent from Bob to her is read by Trudy.
Therefore, this is very dangerous for privacy to avoid these types of attacks.
It is important to use a secure channel between two recipients.
Now, let's consider the scenario of information disclosure here the same.
Bob is sending some information to Alice and Trudy is intercepting this Mrs..
In this case, the jury is selling this information to any other third party.
Like what if this third party uses this information for malicious purposes, therefore what we should
learn that we should not share any private information to communication channels.
Therefore, that is this can lead to information, disclosure and can invade our privacy.
So let us have a look at what we learned in this lecture.
We learned about the definition of passive attacks and how these attacks can be dangerous to our livelihood
in the next lecture.
We will discuss our two attacks.