AWS Certified Advanced Networking - Specialty Exam Guide

Application layer attacks

Application layer attacks come in the highest variety and severity, and include but are not limited to the following:

• Brute-force attacks: An attacker tries to gain access by trying to breach an application entry point (remote desktop, SSH, web login) with a dictionary attack or similar
• Session hijacking: The attacker intercepts credentials or tokens and pretends to be an active user to gain access
• Injection attacks: An attacker exploits poor application security to inject information into the application for DoS or to gain access
• Account hijacking: Accounts are hijacked through phishing or inadvertent disclosure of credentials for DoS or to gain access

We can easily detect brute-force attacks with a monitoring ...