Dictionary attack is everywhere! Attempt to guess passwords
by using well-known words or phrases.
Since most passwords are chosen by users, it stands to
reason that most passwords are or contain common words. There are a little over
a million words in the English not only English it depend on population of the languages,
while there are 308,915,776 possible combinations of 7 letters. Because human
can remember or memorize 7 numbers!
Most attackers will take this into account when attempting
to intrude on your system, and make use of word lists and upgrade their list
as well if they couldn’t break any walls!
Then brute-force attack occurs when an attacker checks all
possible passwords until the correct one is found. When attempting to guess
passwords, this method is very fast when used to check short passwords, but is
generally used in combination with dictionary
attacks and common password lists for
more efficient guesses at longer passwords.
Brute-force attacks are generally performed using scripts or
dedicated tools, which can generate hundreds of HTTP requests per second. Even
if no passwords are guessed correctly, use of such a tool may constitute
a denial
of service (DOS) attack.
Users are creatures of habit, which means they tend to
choose obvious passwords and re-use them over multiple sites. Therefore I always
suggested to change your password constantly, and don’t try to use the common
passwords.
Comments
Post a Comment