Bob, a professional hacker, targeted an organization to launch attacks. Bob gathered information such as network topology and a list of live hosts. Based on the collected information, he launched further attacks over the organization’s network. Identify the type of network attack Bob initiated on the target organization in the above scenario.

The scenario describes an attacker systematically gathering detailed information about a target network, specifically its topology and a list of live hosts. This process of actively connecting to a target system to discover network resources, services, and potential vulnerabilities is known as enumeration. It is a crucial information-gathering phase that follows initial reconnaissance and scanning, allowing the attacker to build a detailed map of the target environment to plan subsequent, more focused attacks. The actions performed by Bob are characteristic of the enumeration phase in a hacking methodology.

A. Data modification: This is an attack on data integrity where information is illicitly altered. The scenario describes information gathering, not the modification of existing data.
C. Session hijacking: This involves an attacker taking control of a legitimate user's session. The scenario details the initial discovery phase, not the takeover of an active session.
D. Buffer overflow: This is a specific software exploitation technique that targets memory management vulnerabilities. It is not a network-level information-gathering process as described in the scenario. ---

1. Kizza, J. M. (2013). Guide to Computer Network Security. Springer London. In Chapter 10, "Network Threats and Attacks," the process of enumeration is described as a follow-up to scanning where an attacker "extracts more details about the network resources, shares, and users" (p. 201). This aligns with Bob's activities of mapping the network. (DOI: https://doi.org/10.1007/978-1-4471-4543-1)

2. EC-Council. (2021). Certified Ethical Hacker (CEH) Version 11 Courseware, Module 04: Enumeration. This module defines enumeration as the process where an attacker establishes an active connection to the target and uses directed queries to gain more information. The objectives listed include enumerating network resources, which encompasses identifying network topology and live hosts.

3. Engebretson, P. (2013). The Basics of Hacking and Penetration Testing: Ethical Hacking and Penetration Testing Made Easy (2nd ed.). Syngress. Chapter 3, "Scanning," details how tools are used to identify live hosts and map the network, which are foundational steps of enumeration used to "paint a clear picture of the target" (p. 61) before launching exploits.