Backdoor attacks where malicious attackers either introduce a hook into a system or takes advantage of troubleshooting procedures. Usually used to bypass authentication. Most common strategies include: Exposed administration interfaces, redundnt interfaces, hidden parameters, redundant users, authorization for 3rd parties, old users in systems, and exposed configuration data.