Which Attack Is It? — TechKnowSurge

About this interactive

What you are doing: naming the attack from what the attacker does. Denial of service: users cannot reach the service. It is disruptive, a flood or a crash, and the server's users and owners both suffer. Eavesdropping: listening in, in person or on network traffic, without changing anything. Spoofing: pretending to be some other device or person: a server, a printer, the CEO's email address, the bank's phone number. Adversary in the middle: the attacker sits between two parties, so traffic that should go straight between them goes through the attacker, who passes it on and can change it. The lesson stresses that these overlap. An adversary in the middle often spoofs each side to get there and eavesdrops once there. Each card here shows one of the four on its own: an attacker who relays and alters traffic between two parties is in the middle; one who only listens is eavesdropping; one who only pretends is spoofing. How to use it: ask what the attacker is doing to the traffic or the service: stopping it, hearing it, faking its source, or standing in its path.

What you'll learn

Distinguish a denial of service, an eavesdropping attack, a spoofing attack and an adversary-in-the-middle attack from what the attacker does: stops users reaching a service, listens in, pretends to be someone else, or sits between two parties relaying and changing their traffic

Aligned to

CompTIA Security+

2.4 Given a scenario, analyze indicators of malicious activity.

Key terms

Denial of Service: An attack that floods a system or network with traffic to make it unavailable to legitimate users.
Eavesdropping: The unauthorized interception of network traffic or keystrokes to capture credentials as they are transmitted or entered.
Spoofing: An attack where an adversary impersonates a trusted entity by falsifying data such as an IP address or email address.
On-Path Attack: An attack in which the adversary positions themselves between two communicating devices to intercept, relay, or alter traffic; also called a man-in-the-middle attack.
Distributed Denial of Service: An attack that uses multiple systems to flood a target with traffic, making it unavailable to legitimate users.

Topics

Denial Of Service Eavesdropping Spoofing On Path Attack Distributed Denial Of Service Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →