What are the Common Threats?

• 
  Eavesdropper / Replay Attack
  observer of the run of authentication data (across the network) for later analysis or interception of the messages between the genuine parties. This observer then makes an improper attempt to obtain tokens to pose as the rightful user. This is often used with the replay attack in which a valid data transmission is maliciously or fraudulently repeated or delayed.
• 
  Password Guessing
  the most common way a hacker will try to get your password is via a dictionary attack. In a dictionary attack, the attacker takes a dictionary of words and names, and tries each one to see if it is your password. They do this with programs, which can guess hundreds or thousands of words per second.
• 
  Verifier Impersonation
  attacker impersonates the verifier and induces the claimant to reveal his secret token.
• 
  Hijacker
  one who takes over an already authenticated session and then poses him/herself as the genuine subscriber or IT system to learn sensitive information or to input/output invalid information.

Registration | <Authentication> | Other Sources of Threats