Brute-force attacks

Forms of attack: Brute-force attacks

1.4.1 Threats to computer systems and networks

Threats to computer systems and networks — Note 4 of 7

What you need to know

A brute-force attack tries every possible combination of characters until the correct password is found. It is usually automated and can crack weak passwords quickly.

What to know

Usually automated using software that can test thousands of combinations per second.
The longer and more complex the password, the longer a brute-force attack takes.

Key terms

Brute-Force Attack: An attack method that systematically tries every possible combination of usernames and passwords until the correct one is found.

Exam technique

Tip:Strong, complex passwords are the main defence against brute-force attacks — longer passwords with a mix of characters are exponentially harder to crack.
Tip:Locking accounts after a set number of failed login attempts is another effective defence.

Ready to test yourself?

Practise 1.4.1 questions

← Previous noteSocial engineering, e.g. phishing, people as the 'weak point'1.4.1 Threats to computer systems and networks Next note →Denial of service attacks1.4.1 Threats to computer systems and networks

Back to Threats to computer systems and networks

Revise another OCR GCSE topic: Identifying and preventing vulnerabilities