Common Network Attacks
The most common ways networks and the data flowing through them get attacked.
Denial of Service (DoS) and DDoS
A Denial of Service attack floods a target server with overwhelming traffic or requests, exhausting its resources so legitimate users can't get through โ like jamming a phone line with endless fake calls so real customers can never get through. A DDoS (Distributed DoS) attack does this using MANY compromised devices simultaneously (a 'botnet'), making it far larger in scale and much harder to block by simply banning one source.
Man-in-the-Middle (MITM) Attacks
In a MITM attack, an attacker secretly positions themselves BETWEEN two communicating parties, intercepting (and potentially altering) their traffic without either side realizing it โ like a postal worker secretly opening, reading, and resealing your mail before delivering it. ARP spoofing (covered earlier) is one common technique used to set up a MITM attack on a local network.
Packet Sniffing
Packet sniffing involves capturing and inspecting data packets as they travel across a network โ legitimately used by network administrators for troubleshooting, but maliciously used by attackers to steal unencrypted sensitive data (like passwords sent over plain HTTP) simply by 'listening in' on network traffic they can access, especially on unsecured public Wi-Fi.
Phishing and Social Engineering
Not all network attacks target the technology directly โ phishing attacks trick PEOPLE into revealing sensitive information (passwords, card details) through fake emails or websites designed to look legitimate. This remains one of the most successful attack categories precisely because it bypasses strong technical security by targeting human trust instead.
Why Encryption and Good Practices Matter
Many of these attacks are significantly less effective (or completely neutralized) when proper security practices are followed: HTTPS encryption defeats most packet sniffing of sensitive data, VPNs protect against MITM attacks on untrusted networks, firewalls and rate-limiting help mitigate DoS attacks, and user awareness training reduces phishing's success rate.
๐ Real-World Use
Major websites regularly face DDoS attacks attempting to take them offline, which is why large services use specialized DDoS-protection providers that can absorb and filter massive volumes of malicious traffic before it ever reaches the actual server, keeping the real service available for legitimate users.
๐ก Pro Tip
In interviews, connecting each attack to its DEFENSE shows deeper understanding than just naming attacks โ e.g. 'packet sniffing is countered by HTTPS encryption' or 'MITM attacks are mitigated by VPNs and certificate validation' โ pairing attack with defense is exactly what strong answers demonstrate.
๐งช Quick Self-Test
Check what you just learned โ no pressure, just practice.
1. What makes a DDoS attack different from a regular DoS attack?
2. What does a Man-in-the-Middle attack involve?
3. Why is HTTPS an effective defense against packet sniffing of sensitive data?