Unauthorized Access Attacks
Although the category "unauthorized access" is not limited to specific attacks against networks, it does cover the most common type of attack that is executed today. When users, whether legitimate or not, connect to a service port such as SSH or Telnet, they may be greeted with a message stating "Unauthorized Access Is Prohibited." If attackers continue to attempt to access the system, their actions are unauthorized. These attacks can occur both outside of and within a network. This attack category does not include an attacker who is connecting to a port to see whether a service is active there; that typically falls into the "reconnaissance" category. Nor does the absence of any warning banner mean that access by anyone is welcome. This category includes any attempt by a person who knowingly tries to access a system to which that person does not have specific access permissions.