Basic Network Attacks in Computer Network (original) (raw)

Last Updated : 28 Apr, 2026

Network attacks are malicious activities aimed at compromising the confidentiality, integrity or availability of computer networks. As dependence on digital systems grows, attackers exploit vulnerabilities to gain unauthorized access, disrupt services or steal data.

• Target multiple layers such as application, transport and network
• Exploit weak configurations, outdated systems and human factors
• Often automated and scalable, impacting large networks quickly
• Continuously evolve, requiring constant monitoring and updates
• Require combined defenses like security controls, policies and user awareness

Key Network Attacks

1. Malware Attacks

Malicious software is designed to disrupt, damage or gain unauthorized access to computer systems. Modern malware is often self-replicating, spreading exponentially across networks by infecting one host and then seeking entry into others.

**Types of Malware:

• **Virus: Requires user interaction to infect a device, such as opening a malicious email attachment containing executable code.
• **Worm: Self-propagating malware that exploits vulnerabilities in network applications to spread without user intervention.
• **Spyware: Software that secretly monitors and collects user information without their knowledge, including browsing habits, keystrokes, passwords and personal data.
• **Adware: Unwanted software that automatically displays or downloads advertisements, often bundled with free software.
• **Botnet: A network of infected computers controlled remotely by attackers, often used to launch coordinated attacks or send spam without the owners' knowledge.

**Real-World Examples: Zeus malware has infected over 3 million computers in the USA, targeting financial systems to steal banking credentials. This threat has compromised major organizations like NASA and Bank of America.

**Prevention Measures:

• Install and regularly update antivirus and anti-malware software
• Avoid opening suspicious email attachments or clicking unknown links
• Use firewalls to block unauthorized network access
• Implement network segmentation to limit malware spread

2. Denial of Service (DoS) Attacks

Aim to render networks, hosts or infrastructure unusable by overwhelming them with malicious traffic or exploiting vulnerabilities.

**Three Main Categories:

• **Vulnerability Attack: Sending specially crafted packets to exploit weaknesses in applications or operating systems, causing them to crash or stop functioning.
• **Bandwidth Flooding: Overwhelming the target's network connection with massive amounts of traffic, blocking legitimate users from accessing services.
• **Connection Flooding: Establishing numerous fake TCP connections that exhaust the target's resources, preventing legitimate connections.

3. Distributed Denial of Service (DDoS)

Uses multiple compromised systems (often botnets with thousands of hosts) to launch coordinated attacks, making them significantly harder to detect and defend against than single-source DoS attacks.

**Prevention Measures:

• Implement rate limiting and traffic filtering to detect abnormal patterns
• Use DDoS protection services and Content Delivery Networks (CDNs)
• Configure network devices to reject malformed packets
• Deploy Intrusion Detection and Prevention Systems (IDS/IPS)

4. Interception and Eavesdropping Attacks

**Packet Sniffing: Attackers use passive receivers to capture and record network traffic, potentially exposing sensitive information like passwords, credit card numbers and private communications. This is particularly dangerous in wireless networks where transmitted packets can be easily intercepted.

**Prevention Measures:

• Use strong encryption protocols (HTTPS, SSL/TLS, VPNs) for all sensitive communications
• Implement WPA3 encryption for wireless networks
• Avoid using public Wi-Fi for sensitive transactions
• Use encrypted messaging applications

5. Identity and Authentication Attacks

**IP Spoofing: Attackers inject packets with false source addresses to disguise their identity and impersonate legitimate users. This requires end-point authentication mechanisms to verify message origins.

**Man-in-the-Middle (MITM) Attack: An attacker secretly intercepts and relays communication between two parties, capturing or modifying data without their knowledge. The attacker can re-route exchanges and control the communication transparently.

**Compromised-Key Attack: When attackers obtain secret encryption keys through resource-intensive methods, they can access secured communications without detection by either sender or receiver.

**Prevention Measures:

• Implement strong authentication mechanisms (multi-factor authentication)
• Use digital certificates and Public Key Infrastructure (PKI)
• Deploy IPsec or other authenticated communication protocols
• Implement network access control (NAC) systems
• Use mutual authentication to verify both parties in communication

6. Social Engineering and Deception Attacks

**Phishing: Fraudulent emails pretending to be from reputable companies trick users into revealing personal information like passwords and credit card number.

Types of Phishing:

• **Email Phishing: Mass-distributed attacks impersonating trusted companies
• **Spear Phishing: Targeted attacks using personalized information
• **Smishing: SMS-based phishing with malicious links
• **Vishing: Voice call scams impersonating legitimate organizations

**DNS Spoofing (DNS Cache Poisoning): Attackers corrupt DNS resolver caches with false data, causing name servers to return incorrect IP addresses and redirecting users to malicious websites.

**Prevention Measures:

• Implement DNSSEC (Domain Name System Security Extensions)
• Use trusted and secure DNS servers
• Configure DNS servers to accept updates only from authorized sources
• Regularly clear DNS caches
• Monitor DNS query patterns for anomalies

7. Web Application Attacks

**SQL Injection:

• Attackers insert malicious SQL code into input fields to manipulate databases.
• Can lead to unauthorized access to sensitive data and modification of database contents.
• In severe cases, attackers may delete entire databases.

**Cross-Site Scripting (XSS):

• Attackers inject malicious scripts into trusted websites that execute in users’ browsers.
• Scripts can steal session cookies or redirect users to malicious websites.
• May alter page content to trick users into revealing sensitive information.

**Prevention Measures:

• Use parameterized queries and prepared statements for database operations
• Implement input validation and sanitization on both client and server side
• Apply proper output encoding to prevent script execution
• Use Content Security Policy (CSP) headers
• Employ Web Application Firewalls (WAF)
• Keep web frameworks and libraries updated

8. Network Layer Attacks

**ARP Spoofing (ARP Poisoning): Attackers send fake Address Resolution Protocol (ARP) messages on a local network to associate their MAC address with the IP address of another device (usually the gateway). This allows them to intercept, modify or block network traffic between devices on the same network.

**Prevention Measures:

• Implement static ARP entries for critical systems
• Use Dynamic ARP Inspection (DAI) on network switches
• Deploy ARP spoofing detection tools
• Enable port security on switches
• Implement network segmentation with VLANs

9. Privilege Escalation

Attackers gain initial access to a system through weak points, then escalate their privileges to obtain higher-level permissions and access more sensitive systems. This technique allows them to move laterally through networks and compromise critical resources.

**Prevention Measures:

• Implement the principle of least privilege (users get only necessary permissions)
• Regularly audit user accounts and access rights
• Use privilege access management (PAM) solutions
• Enable logging and monitoring of privilege changes
• Keep systems patched to prevent exploitation of known vulnerabilities
• Implement strong password policies and multi-factor authentication