Which of the following attacks refers to unintentional download of malicious software via the Internet? Here, an attacker exploits flaws in browser…

A drive-by download is an attack where malicious code is downloaded and executed on a user's computer without their consent or knowledge. This occurs simply by visiting a compromised or malicious website. The attack vector relies on exploiting vulnerabilities in the web browser, associated plugins (like Flash or Java), or the underlying operating system. The user's only action is navigating to a URL; no further interaction, such as clicking a link or authorizing a download, is required. This method directly matches the scenario described in the question.

A. Malvertising: This is a method of delivering malware via malicious online advertisements. While it can be a vehicle for a drive-by download, it is the delivery mechanism, not the attack itself.

B. Internet relay chats: This is a communication protocol (IRC). While malware can be distributed through IRC links or files, IRC itself is not the attack described.

D. Phishing: This is a social engineering attack that deceives users into voluntarily providing information or clicking a malicious link. It requires active user participation, unlike a drive-by download.

1. Cova, M., Kruegel, C., & Vigna, G. (2010). Detection and analysis of drive-by-download attacks and malicious JavaScript code. In Proceedings of the 19th international conference on World wide web (pp. 281–290). ACM. The paper defines drive-by-download attacks as those that "install malware on a victim's machine when the victim simply visits a malicious web page." (Section 1, Paragraph 1). https://doi.org/10.1145/1772690.1772720

2. Provos, N., McNamee, D., Mavrommatis, P., Wang, K., & Modadugu, N. (2008). The ghost in the browser: Analysis of web-based malware. In Proceedings of the first conference on First Workshop on Hot Topics in Understanding Botnets (HotBots'07). USENIX Association. This foundational paper describes the mechanics of drive-by downloads, stating they "exploit vulnerabilities in a web browser or its plugins to install malicious code on a client's computer." (Section 2, "Drive-by-downloads").

3. Google Transparency Report. (n.d.). How Safe Browsing works. Google. The documentation describes how Google Safe Browsing protects users from "unwanted software," which includes "drive-by-downloads that happen without the user’s knowledge." (Section: "What is malware and unwanted software?").

4. Le, H. V., Al-Shaer, E., & Tian, D. (2014). No-SE: A Framework for Preventing Drive-by-Downloads from Benign-but-Vulnerable Websites. In Proceedings of the Network and Distributed System Security Symposium (NDSS) 2014. The Internet Society. The introduction states, "In a drive-by-download attack, a victim gets infected with malware simply by browsing a malicious website with a vulnerable browser." (Section 1, Paragraph 1).