Network Vulnerabilities (HL)
What Are Network Vulnerabilities?
Network vulnerabilities are security weaknesses that attackers can exploit to gain unauthorized access or disrupt network operations.
Cyber threats can lead to data breaches, financial losses, and compromised privacy.
Types of Network Vulnerabilities
| Vulnerability | Summary, Impact & Example |
|---|---|
| Distributed Denial of Service (DDoS) |
Attack type: Floods a target with excessive traffic to overwhelm it. Impact: Services slow down or crash; users can’t access them. How: A botnet bombards a school website with requests until it becomes unreachable to students.
|
| Insecure Network Protocols |
Attack type: Using unencrypted/weak protocols (e.g. HTTP, FTP) exposes data in transit. Impact: Passwords or private data can be read or altered. How: A student logs in over public Wi-Fi via HTTP; an eavesdropper reads the username and password.
|
| Malware |
Attack type: Malicious software (virus, worm, ransomware) infects devices or networks. Impact: Data loss, locked files, downtime, and potential financial costs. How: A staff member opens a suspicious email attachment; ransomware encrypts files and demands payment.
|
| Man-in-the-Middle (MitM) |
Attack type: An attacker secretly intercepts and can change communications. Impact: Stolen credentials, altered data, identity theft. How: A fake Wi-Fi hotspot captures a user’s login details as they sign in to a website.
|
| Phishing Attacks |
Attack type: Deceptive emails/messages trick users into revealing secrets. Impact: Account takeover, financial fraud, further compromise. How: An email posing as IT support asks a student for their password to “fix an issue,” then the attacker logs in as them.
|
| SQL Injection |
Attack type: Malicious SQL is sent via input fields to manipulate a database. Impact: Data leaks, unauthorized changes, full database access. How: An attacker enters crafted input into a school site’s login form to bypass checks and extract user records.
|
| Cross-Site Scripting (XSS) |
Attack type: Injected scripts run in other users’ browsers. Impact: Session hijacking, credential theft, unwanted actions. How: A forum comment contains a malicious script; readers’ browsers execute it and send their session tokens to the attacker.
|
| Unpatched Software |
Attack type: Known bugs remain unfixed on systems or apps. Impact: Attackers use public exploits to gain control or steal data. How: An org delays OS updates; a widely known exploit lets attackers take over a server.
|
| Weak Authentication |
Attack type: Easy passwords or no 2FA make accounts simple to break into. Impact: Unauthorized access to email, files, and systems. How: A user chooses “1234” as a password; an attacker’s common-password list grants instant access.
|
| Zero-Day Exploits |
Attack type: Brand-new flaws are exploited before fixes exist. Impact: Hard to prevent; can affect many systems quickly. How: A previously unknown bug in a popular app is abused at scale before a patch is released.
|
Comparison of Network Vulnerabilities
| Vulnerability | Attack Type | Impact |
|---|---|---|
| DDoS | Traffic overload | Crashes network services |
| Insecure Protocols | Weak encryption | Data interception |
| Malware | Malicious software | Data loss, system compromise |
| MitM Attack | Data interception | Identity theft |
| Phishing | Deceptive emails | Stolen credentials |
| SQL Injection | Database manipulation | Data theft |
| XSS | Malicious scripts | Session hijacking |
| Unpatched Software | Exploited flaws | System compromise |
| Weak Authentication | Guessable passwords | Unauthorized access |
| Zero-Day Exploit | Unknown vulnerability | Unpreventable breach |
Key Takeaways
- Network vulnerabilities expose systems to cyber threats.
- Common attacks include DDoS, malware, phishing, SQL injection, and MitM attacks.
- Ensuring strong authentication, software updates, and secure protocols reduces risks.
- Cybersecurity strategies must evolve to counter new threats.