Bugtraq: Re: On classifying attacks

[Thierry Carrez <koon () gentoo org>]

Forte Systems - Iosif Peterfi wrote:

> Ok, so let's split them like this:
>
> 1. Simple
>   1.1 Remote
>   1.2 Local
> 2. Compound
>   2.1 Social engineered
>   2.2 Technical
>   2.3 Local
>
> [...]
> Does this makes sense to anyone ?!
I use "Active" instead of "Simple" and "Passive" instead of "Compound",
but it's globally the same. "Compound"/"Passive" require the attacker to
wait for something else to happen. That leaves me with:

Remote Active
Local Active
Remote Passive (Social engineered)
Remote Passive (Technical)
Local Passive

-- 
Koon