Network Security and Types of Attacks

What is Network Security? (In Simple Words)

When two or more computers, phones, or servers connect via Wi-Fi, LAN cables, or the Internet to share data, they form a Computer Network.

Network Security consists of the hardware devices (like Firewalls), software tools (like Antivirus & VPNs), encryption protocols (like SSL/TLS), and rules designed to protect the usability, reliability, integrity, and safety of a computer network and all the data travelling across it.

💡 Real-Life Analogy:
Think of the Internet as a busy national highway. Network Security is the system of toll booths, traffic police, armored cash vans, and speed cameras that keep criminals off the road and ensure your packages reach their destination safely!

1. Classification of Network Attacks (ITU-T X.800 Standard)

In network security exams, all cyber attacks are classified into two main categories:

1. Passive Attacks (Spying / Listening secretly without changing anything)
2. Active Attacks (Modifying, faking, or blocking data)

2. Passive Attacks (In Detail)

In a Passive Attack, the hacker acts like a silent wiretapper. The sender and receiver have no idea someone is listening because the message arrives without any delay or change.

Two Types of Passive Attacks:

1. Release of Message Contents (Eavesdropping / Snooping):
   • The attacker intercepts and reads a confidential email, phone call, or file being transferred over an unencrypted network.
   • Example: A hacker using Wireshark on a free cafe Wi-Fi to read your unencrypted login password.
2. Traffic Analysis:
   • Suppose the message is encrypted, so the hacker cannot read the actual words.
   • Even then, the hacker watches who is talking to whom, how often, and how long the messages are to guess what is happening!
   • Example: Before a big company merger or military operation, a sudden spike in encrypted emails between two headquarters tips off the attacker.

🛡️ How to Stop Passive Attacks:
Passive attacks are hard to detect (since nothing is altered), so we focus on Prevention using strong Encryption (AES, SSL/TLS, VPNs).

3. Active Attacks (In Detail)

In an Active Attack, the hacker actively interferes with the network traffic by altering messages, pretending to be someone else, or crashing the server.

Four Types of Active Attacks:

1. Masquerade (Impersonation / Spoofing)

• Occurs when one person or computer pretends to be a different authorized user to gain illegal access.
• Example: IP Spoofing or Email Spoofing, where a hacker sends an email pretending to be your company CEO or bank manager.

2. Replay Attack

• The attacker secretly records a legitimate network transmission (like a valid login token or a "Transfer ₹1,000" bank packet) and re-transmits (replays) that exact packet later to trick the server into repeating the action!
• Prevention: Using Timestamps and one-time random numbers (Nonces / OTPs).

3. Modification of Messages (Man-in-the-Middle)

• Some portion of a genuine message is altered, delayed, or reordered to produce an unauthorized effect.
• Example: Changing "Allow Rahul to read file" to "Allow Hacker to delete file", or changing the receiver’s bank account number in transit.

4. Denial of Service (DoS and DDoS)

• Prevents normal, legitimate users from using a network or website by overloading the server with millions of fake traffic requests until it crashes.
• When thousands of infected computers (a Botnet) attack a server together, it is called a Distributed Denial of Service (DDoS) attack.

4. Comparison: Active Attacks vs. Passive Attacks

💡 DAVV Exam Preparation Tips

10-Mark Question: “What is Network Security? Explain the different types of attacks (Active and Passive Attacks) with suitable examples.”

• Draw the Active vs. Passive classification diagram.
• Clearly explain the 2 Passive Attacks (Snooping, Traffic Analysis) and 4 Active Attacks (Masquerade, Replay, Modification, DoS).
• Conclude with the 6-point Active vs. Passive comparison table.