SecurityBeginner
Brute-Force Attack
PronunciationBROOT-fors uh-TAK
Definition
A brute-force attack is a trial-and-error method used to guess information, such as passwords or encryption keys, by systematically trying every possible combination.
Where you hear it
In security audits, server logs, and discussions about authentication security.
Examples
The server blocked the IP address after detecting a brute-force attack on the login page.
We implemented account lockout policies to prevent brute-force attacks.
Common mistake
Thinking that a brute-force attack is the same as a dictionary attack; while they are similar, a brute-force attack tries all possible character combinations, whereas a dictionary attack only tries words from a predefined list.