Security Testing >Evolution of Threats

Evolution of Threats

Networks and PCs are real and so are threats associated with them. Threats have mutated from being basic stand alone PC hacking and viruses to web application and network penetration.

1ST GENERATION (1990’s)
Initially hacking was all about pushing programs beyond what they were supposed to do. Hackers / Attackers concentrated on individual computers and generated basic macro viruses.

2nd GENERATION (2000’s)
This generation saw the birth of Client – Server Trojans, which were malicious programs that lurked in the background and transmitted sensitive information to an outside attacker. Further, Denial of Service (DoS) raised its ugly head in this generation, wherein an attempt is made to overwhelm the server with so many requests that it crumbles under the unprecedented burden.

3rd GENERATION
This generation witnessed the emergence of new kinds of attacks Cracking, Phreaking, etc. Cracking is the process of gaining unauthorized access to restricted features of a commercially protected software application or product; features, otherwise, accessible only upon purchasing a valid license.

Even telecommunication networks were not spared, Phreaking was done to make free calls over paid lines and/or charge somebody else’s account for the same. Other threats that made an entry in this generation were Keyloggers, Rootkits, Worms, Distributed DoS Attacks, etc.

4th GENERATION
This is the generation that we are currently in. Attacks, nowadays, have become so sophisticated that even detecting the very occurrence of one has become a challenge. This generation has brought with it, what is called ‘Web Application Penetration’. In this, all attacks are directed through, the most popular, Port 80.

These attacks exploit vulnerabilities like SQL Injection, Cross Site Scripting (XSS), etc.Network penetration, Backdoors, Bots, Phishing, Social Engineering, etc are wide spread in this generation.

5th GENERATION (Future)
The future is as scary as the past. Attacks like Server-Client Trojans could render almost every protection mechanism useless and redefine the way attacks are carried out. Moreover, the preferred choice of injecting sophisticatd threats like Server-Clients is through products/applications poisoning.

So what’s next? Product/application poisoning? We better be prepared for the worst!!!

Evolution of Counter Measures
   
 
About Us | Services | Partner | Training | Careers | Certification | Case Studies | Resources| FAQ | Contact Us | Sitemap