Cyberstudy
PDF p.36 In progress

Network Vectors

Open PDF at p.36 20 flashcards

Summary

PDF p.36

Network vectors are paths through which threat actors exploit vulnerabilities in software over a network. These can be remote or local exploits, and minimizing risks involves securing networks to ensure confidentiality, integrity, and availability.

In plain words

Supplementary — not from your PDF

Network vectors are ways in over a network: exploiting a service remotely, plugging into a spare port, cracking Wi-Fi, abusing cloud logins or default passwords. Secure networks protect the confidentiality, integrity and availability of traffic.

Detailed explanation

PDF p.36
  • Exploit Techniques
    • Remote Exploit
      • Definition: Exploits vulnerabilities by sending code over a network without needing an authenticated session.
    • Local Exploit
      • Definition: Requires execution from an authenticated session, possibly using valid credentials or hijacking an existing session.
  • Unsecure Networks
    • Definition: Networks lacking confidentiality, integrity, and availability.
    • Attributes
      • Lack of Confidentiality: Eavesdropping attacks to recover sensitive information.
      • Lack of Integrity: Unauthorized devices intercepting or modifying traffic (on-path attacks).
      • Lack of Availability: Service disruption attacks (DoS attacks).
  • Securing Networks
    • Methods: Use access control frameworks and cryptographic solutions to identify, authenticate, authorize, and audit users, hosts, and traffic.
  • Specific Threat Vectors
    • Direct Access
      • Definition: Physical access to perpetrate attacks (e.g., accessing unlocked workstations, stealing devices).
    • Wired Network
      • Definition: Unauthorized devices attached to physical network ports.
    • Remote and Wireless Network
      • Definition: Obtaining credentials or cracking security protocols for remote/wireless access.
    • Cloud Access
      • Definition: Exploiting weak credentials in cloud services.
    • Bluetooth Network
      • Definition: Exploiting vulnerabilities in Bluetooth protocols.
    • Default Credentials
      • Definition: Using default passwords to gain control of devices/apps.
    • Open Service Port
      • Definition: Unauthenticated connections to network ports running vulnerable software.

Important terms

taken from the text above
Remote Exploit
Exploits vulnerabilities by sending code over a network without needing an authenticated session.
Local Exploit
Requires execution from an authenticated session, possibly using valid credentials or hijacking an existing session.
Unsecure Networks
Networks lacking confidentiality, integrity, and availability.
Lack of Confidentiality
Eavesdropping attacks to recover sensitive information.
Lack of Integrity
Unauthorized devices intercepting or modifying traffic (on-path attacks).
Lack of Availability
Service disruption attacks (DoS attacks).
Direct Access
Physical access to perpetrate attacks (e.g., accessing unlocked workstations, stealing devices).
Wired Network
Unauthorized devices attached to physical network ports.
Remote and Wireless Network
Obtaining credentials or cracking security protocols for remote/wireless access.
Cloud Access
Exploiting weak credentials in cloud services.
Bluetooth Network
Exploiting vulnerabilities in Bluetooth protocols.
Default Credentials
Using default passwords to gain control of devices/apps.
Open Service Port
Unauthenticated connections to network ports running vulnerable software.

Examples & real-world scenarios

Supplementary — not from your PDF
  • Remote exploit: an attack over the network that needs no login.
  • Default credentials: a camera still using the password from its manual.
  • Wired vector: an unauthorized laptop plugged into a meeting-room network port.

Scenario

A new warehouse camera system is installed and left on the vendor's default admin password. It's reachable from the office network, so anyone who finds it can take control. Changing default credentials during setup closes that vector.

Common mistakes

Supplementary — not from your PDF
  • Confusing a remote exploit (no authenticated session needed) with a local one (needs an authenticated session).
  • Thinking default passwords only matter for home equipment. Enterprise devices ship with them too.

Practical skills

Supplementary — not from your PDF
  • Match a network weakness to the CIA property it exposes.

What I should remember

Key Points PDF p.36
  • Exploit Techniques
    • Remote: No authenticated session needed.
    • Local: Requires authenticated session.
  • Unsecure Networks
    • Confidentiality: Eavesdropping.
    • Integrity: On-path attacks.
    • Availability: DoS attacks.
  • Securing Networks
    • Methods: Access control, cryptographic solutions.
  • Specific Threat Vectors
    • Direct Access: Physical site access.
    • Wired Network: Unauthorized device attachment.
    • Remote/Wireless Network: Credential theft or protocol cracking.
    • Cloud Access: Weak credentials exploitation.
    • Bluetooth Network: Vulnerability exploitation.
    • Default Credentials: Using default passwords.
    • Open Service Port: Unauthenticated connections.