Attack on Passwords
Discuss the main methods used to attack passwords and how to protect against them.
There are certain techniques used to attack passwords. One of the methods is called brute force attack. The hacker utilizes a computer program to attempt to log in with potential combinations of passwords, typically beginning with passwords that are simplest to guess. He/she may possibly start with “password,” 123, or use birthday dates to attempt to log in if the target is known to him/her, etc (Kraus, 2010). Another method is referred to as dictionary attack. Basically, this is type of a brute force attack, only that it is word-based. The hacker begins by testing the likelihoods from a probable set of words and then progresses methodically through the dictionary if needed. Overall, hackers using this method succeed since people tend to select short passwords (e.g. with seven characters or fewer). Key logger attack is yet another example of a password attack. In this method, the hacker utilizes the malware technique where he/she slips malicious code onto the machine of the user via different methods- for instance, email attachments that are infected, spoofed websites etc (Kraus, 2010). The malware then remains concealed in the background where it records keystrokes as the target presses the keyboard or even logs the movements of the mouse. The key logging software then transmits any of these back to the hacker’s servers.
Users can adopt certain strategies to protect themselves from these password attacks. One such strategy entails developing passwords that are strong. To achieve this, the password should have more than 7 characters, have a mixture of lowercase and uppercase letters, symbols and numbers, and the passwords should be changed often (Kraus, 2010). Another strategy would entail using password managers and generators; however, it is important to ensure that they are from highly reputable security organizations and can be accessed from official application stores and websites. Application of encryption is another option. Encryption can be utilized to safeguard transactions that are done online.
Reference
Kraus, R. (2010). Seven deadliest Microsoft attacks. Paises Bajos: Syngress/Elsevier.
