Class 43 Read : Sniffing and Evasion - taylortommy23/401-Reading-Notes GitHub Wiki
Explain a Sniffing attack using non-technical terms.
- Sniffing is like eavesdropping on a conversation without being noticed. So in a digital world, a sniffing attack is when someone secretly listens to the communication happening over the internet to steal sensitive data or gain unauthorized access to a computer system.
What are the two types of sniffing attacks and what are some pros and cons of each approach?
- Passive Sniffing: Secretly listening without actively interfering. Hard to detect but limited in harm.
- Active Sniffing: Intercepting and possibly altering communication. Riskier, easier to detect.
How does encryption protect traffic against sniffing attacks?
- Encryption protects against sniffing by turning data into a secret code that can only be understood by the intended recipient. Encryption ensures that even if sniffers capture the data packets, they are meaningless without the encryption key, making it extremely difficult for attackers to steal sensitive information.
References:
https://www.geeksforgeeks.org/what-is-sniffing-attack-in-system-hacking/