Password Attacks 2.4

Question 1

Hashing a Password

Answer 1

• Creating a message digest or “finger print”
• Creates a one way trip, a common way to store passwords

Question 2

Spraying Attack

Answer 2

• Online brute force attack
• Using a limited number of passwords on all accounts.

Question 3

Brute Force

Answer 3

• The attacker attempts all possible password combinations

Question 4

Protection Against a Brute Force Attack

Answer 4

• Using a strong hashing algorithm
• Creating a hash this very long.

Question 5

Brute Force Attack - Online

Answer 5

• Keep trying the login process
• Very slow
• Most accounts will lockout after a certain amount of failed attempts.

Question 6

Brute Force Attack - Offline

Answer 6

• Attacker steals a password file.
• Calculate a password hash, compared it to a stored hash
• Performs hash comparisons.