ioplogo.blogg.se

Such attacks might primarily be considered an integrity attack but could also represent an availability attack. Modification attacks involve tampering with our asset. We might also consider such a database attack to be a modification attack rather than an interruption attack. In the case of an attacker manipulating the processes on which a database runs in order to prevent access to the data it contains, we might consider this an integrity attack, due to the possible loss or corruption of data, or we might consider it a combination of the two.

In the case of a DoS attack on a mail server, we would classify this as an availability attack. Interruption attacks often affect availability but can be an attack on integrity as well. Interruption attacks cause our assets to become unusable or unavailable for our use, on a temporary or permanent basis. Properly executed, interception attacks can be very difficult to detect. Interception might take the form of unauthorized file viewing or copying, eavesdropping on phone conversations, or reading e-mail, and can be conducted against data at rest or in motion.

Interception attacks allow unauthorized users to access our data, applications, or environments, and are primarily an attack against confidentiality.