Denial of service, data interception and SQL injection

Overview

Denial of service and DDoS attacks, botnets, data interception and theft, and how SQL injection exploits a poorly written website.

What you need to know

Answer each one before you reveal it.

Questions from this subtopic

Each one with the model answer underneath.

1. 1

   What is a denial of service (DoS) attack?

   Model answer

   A denial of service attack floods a server or network with more requests than it can handle. Genuine users are then unable to reach the website or service.

2. 2

   Describe how a distributed denial of service (DDoS) attack is carried out.

   Model answer

   An attacker uses a botnet of many infected computers to send requests at the same time. The traffic comes from so many sources that blocking it is very difficult.

3. 3

   Define the term botnet.

   Model answer

   A botnet is a network of computers infected with malware and controlled remotely by an attacker. The owners usually do not know their computers are being used.

4. 4

   What is the purpose of a denial of service attack?

   Model answer

   A DoS attack aims to disrupt an organisation by taking its website or service offline. Attackers may want revenge, publicity for a cause, or payment to stop.

5. 5

   Why can a denial of service attack cost a business money even though no data is stolen?

   Model answer

   Customers cannot buy or use services while the site is down, so sales are lost. The business's reputation suffers and customers may move to competitors.

6. 6

   What is data interception?

   Model answer

   Data interception is capturing data as it travels across a network. The attacker copies the data without the sender or receiver knowing.

Other ways to work this

The same content, four other ways.

What is inside Levo

Six ways to work the same material.