What types of attacks typically target enterprise networks and servers?
• Reconnaissance — Includes host sweeps, TCP and UDP port scans, email reconnaissance, and indexing public web servers to find CGI holes. • Exploits — Attackers take advantage of hidden features and bugs to gain access to the system. The attacks may affect encrypted or unencrypted data. Nuisance programs like spyware can fall into this group. • Distributed denial-of-service (DDoS) attacks — Attackers try to crash a service or machine, overload the CPU or network links, or fill up the disk. Attackers do not always try to gain information; sometimes, they simply want to prevent you from using your computer.
