SECAI Core · phase 11 of 15 · noun

Brute force attack

A type of password attack where an attacker uses an application to exhaustively try every possible alphanumeric combination to crack encrypted passwords.

The Explain card

Plain English
A brute force attack tries every possible combination of characters until a password or key is found. It relies on raw computing power and the target not locking the attacker out.
Example
An attacker points a cracking tool at a leaked database of hashed admin passwords for an ML platform, cycling through billions of guesses per second on rented GPUs.
Why it matters
AI infrastructure leans on GPUs, and so do password crackers. Long passphrases, strong hashing, rate limiting, and MFA turn exhaustive guessing from a weekend job into a geological one.
Hook
Every key on the ring, one after another, until the door opens.

Word knowledge

How the word is built, where it came from, and what it sits beside in memory.

In a sentence

A penetration tester launched a brute force attack against a test SSH server, then confirmed that rate limiting blocked repeated login attempts.

Why these words
  • brute Latin brutus, heavy or dull qualifies the force as raw and unguided
  • force Old French force, strength supplies the phrase's sense of applied effort
Where it came from
Origin
English phrase combining brute, from Latin brutus through French, with force, from Latin fortis through Old French
Entered the language
18th century
What changed
It first referred to raw physical power rather than reason, then expanded to methods that rely on repeated effort instead of a selective strategy.
How it is spelled
Pattern
brute keeps the silent final e pattern found in mute and flute
Pattern
force ends in ce, where the e helps mark c as the sound /s/

Spelled like

  • mute
  • flute
  • face
  • voice
Broken into chunks
  • brute
    • brutal
    • brutish
  • force
    • forcible
    • enforce
What it sits beside

Same subject

Same shape

  • dictionary attack
  • replay attack
  • side-channel attack

password attack methods

  • brute force attack
  • dictionary attack
  • password spraying
  • credential stuffing

Where it sits in the deck

Phase 11: Threat Landscape: Attack Vectors and Adversarial Techniques

With defences named, learn what they must defend against — the full catalogue of attack techniques targeting AI systems, their inputs, outputs, training pipelines, and supply chains.

Neighbours in this phase