Password Spraying Attack

Alternative Forms

• Low and Slow Attack

• Spray-Password Attack

...

• Alternatives to password authentication

• Audits to reveal and address weak passwords

• Intrusion Detection Systems (IDS)

• Intrusion Prevention Systems (IPS)

• Multi-Factor Authentication (MFA)

• Multi-Step Verification (MSV)

• Password complexity

Sample Sentence

Alice was running a successful online shop with thousands of clients. The online shop used password-based single-factor authentication. Eve used a robot to web scrap the public profiles of the online shop and build a database of plausible passwords. She then launched a Password Spray Attack and quickly found a few hundreds valid passwords. She then used Bob as a mule to transfer to steal money using the credit card information of the shop customers.

Conceptual Diagram

Definition 2

A Password Spraying Attack is an instance of an attack that uses the password spraying attack technique.

Related Terms

• Attack Hyperonym

• Attack Technique Hyperonym

• Authentication

• Brute Force Attack Hyperonym

• Credential Stuffing Hyponym

• Heap Spraying

• Password

...