Attacks are evolving

Password Guessing

Self-Replicating Code

Password Cracking

Exploiting Known Vulnerabilities

Burglaries

Hijacking Sessions

Networked Management Diagnosis

GUI

Automated Probes/Scans

www Attacks

Distributed Attack Tools

Staged Attack

Attack Sophistication

Intruder Knowledge

LOW

HIGH

1980

1985

1990

1995

2000

Disabling Audits

Back Doors

Sweepers

Sniffers

Packet Spoofing

Denial of Service

“Stealth”/Advanced Scanning Techniques

Cross-Site Scripting

Network Infrastructure Security © 2002, Gary McGraw

Previous slide

Next slide

Back to first slide

View graphic version