network security

network security

1. vunerablities

   • malware
     • This is the kind of software that is specifically designed to gain access or cause damage to a computer without the owner knowing. There are various types of malware includes viruses and keyloggers.
       • To protect yourself from this
         • To avoid a malware attack you may need to update your system regularly and remove software you do not use. Another option is to not call fake tech support numbers and read emails carefully checking for any mistakes.
   • phishing
     • phishing is when someone tries to scam someone else by pretending to be someone important or a company. They mainly try to trick you into giving out personal details such as bank numbers and passwords.
       • To protect yourself from this
         • To avoid a phishing attack you should always be careful on what emails are sent as they not be always trustworthy or pretend to be a person/ company. Another option is to check the source of the email to check if it is reliable and never click on the links provided by these emails.
   • ransomware
     • ransomware is a type of malicious software from cryptovirology that threatens to publish the victims details or personal information or to purposely block the account until they agree to pay the ransom.
       • To protect yourself from this
         • To protect yourself against a ransomware attack you should back up files. the greatest damage people suffer from a ransom is to lose all their files or specific ones.Another option is to use a antivirus program as they can stop regular ransom attacks and stop data without permission to be downloaded onto another device.
   • trojan horse
     • one of the most insidious types of the trojan horse is a program that claims to get rid of your computer viruses but instead introduces viruses to your computer.
       • To protect yourself from this
         • To protect yourself from a trojan horse attack is to be weary of unknown personnel to send you an unidentified email and to tell you to open a linkas usualy it will open a .exe file which will then infect your computer with a virus.
   • brute force
     • brute force is a trial and error method used to obtain information such as a user password or personal details like a pin number. In a brute force attack an automated software is used to generate a large number of consecutive guesses as to the value of the needed data.
       • To protect yourself from this
         • For a brute force attack the best thing to do is lock accounts when logged out so no-one can enter after a failed attempt of passwords
   • denial of service
     • in computing a denial of service attack is a cyber attack where the intruder seeks to make a machine or network resource unavailable to its intended users by temporarily disrupting services of the host connected to the internet. Denial of service is typically accomplished by flooding the targeted machine with requests in an attempt to overload the systems and prevent legitimate requests from being fulfilled
       • To protect yourself from this
   • social engineering
     • social engineering means to psychologically manipulate people into performing actions. a type of confidence trick for the purpose of information gathering, fraud or system access. it differentiates from a traditional con in that is used to in a more complex scheme.
       • To protect yourself from this
   • man in the middle
     • A man in the middle attack is an attack where the attacker secretly relays and possibly alters the communication between two parties who believe they are directly communicating with each other. this is also known as eavesdropping in which the attacker makes independent connections with the victims and tricks people into thinking they are talking to each other privately.
       • To protect yourself from this
   • data interception
     • when packets travel across a network they are vunerable to being read or altered or hijacked meaning that what you receive may not be what was originally sent to the desired person.usually an attacker does this to gather sensitive information from a suspect or victim.
       • To protect yourself from this
   • packet eavesdropping
     • packet eavesdropping is similar to data interception in which the attacker reads the packets being sent from a device to another. usually tecniques like this are used to debug or test programs.
       • To protect yourself from this
   • messsage tampering
     • Illegal or improper alteration or interference with a document or evidence. tampering can also be considered as convincing a witness to say something improper or to alter their documents.
       • To protect yourself from this
         • To protect yourself from message tampering create a validate action. you can do this action to an existing or new processing policy.
   • SQL injection
     • SQL injection is a code technique that might destroy your database. SQL injection is one of the most common web hacking techniques. It is the placement of malicious code in SQL statements, via web page input.
       • To protect yourself from this
         • to protect yourself from an sql injection you could use prepared statements, these ensure that an attacker is not able to change the program. Or you can use a web application firewall.Another way to prevent an sql injection is to regularly apply software patches.