Brute force and dictionary attacks in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a brute force attack?

A brute force attack is a method where an attacker tries every possible combination of passwords or keys until the correct one is found. It is like trying every key on a keyring to open a locked door.

beginner

How does a dictionary attack differ from a brute force attack?

A dictionary attack uses a list of common words or passwords (called a dictionary) to guess the password, instead of trying every possible combination. It is faster but only works if the password is simple or common.

intermediate

Why are brute force attacks slow compared to dictionary attacks?

Brute force attacks try every possible combination, which can take a very long time, especially for long passwords. Dictionary attacks only try common or likely passwords, so they are faster but less thorough.

beginner

What is one common way to protect against brute force and dictionary attacks?

Using strong, long passwords with a mix of letters, numbers, and symbols makes it harder for attackers to guess. Also, limiting login attempts and using two-factor authentication helps protect accounts.

intermediate

What role do password hashing and salting play in defending against these attacks?

Password hashing converts passwords into a fixed code that is hard to reverse. Salting adds random data to passwords before hashing to make attacks like dictionary attacks much harder because attackers can't use pre-made lists.

What does a brute force attack try to do?

A Try every possible password combination

B Use a list of common passwords

C Steal passwords from a database

D Guess passwords based on user information

A brute force attack tries every possible password combination until it finds the correct one.

Which attack uses a pre-made list of common passwords?

A Dictionary attack

B Brute force attack

C Phishing attack

D Man-in-the-middle attack

A dictionary attack uses a list of common or likely passwords to guess the correct one.

Why is using a long and complex password important?

A It makes passwords easier to remember

B It allows attackers to guess faster

C It slows down brute force and dictionary attacks

D It prevents phishing attacks

Long and complex passwords increase the number of possible combinations, making attacks slower and harder.

What is salting in password security?

A Limiting login attempts

B Storing passwords in plain text

C Using common words as passwords

D Adding random data to passwords before hashing

Salting adds random data to passwords before hashing to make attacks like dictionary attacks more difficult.

Which method helps protect accounts from brute force attacks?

A Allow unlimited login attempts

B Use two-factor authentication

C Use simple passwords

D Share passwords with friends

Two-factor authentication adds an extra step to verify identity, making it harder for attackers to access accounts.

Explain in your own words how brute force and dictionary attacks work and how they differ.

Think about trying keys on a door versus trying only the keys you think might fit.

Describe at least two ways to protect your accounts from brute force and dictionary attacks.

Consider what makes guessing passwords harder and what stops repeated tries.