Network Security

Network Security

1. Malware

   • Malware, short for malicious software, is an umbrella term used to refer to a variety of forms of harmful or intrusive software, including computer viruses, worms, Trojan horses, ransomware, spyware, adware, scareware, and other malicious programs.

2. Phishing

   • Phishing is the attempt to obtain sensitive information such as usernames, passwords, and credit card details (and money), often for malicious reasons, by disguising as a trustworthy entity in an electronic communication.

3. Man In The Middle

   • man-in-the-middle attack (MITM) is an attack where the attacker secretly relays and possibly alters the communication between two parties who believe they are directly communicating with each other.

4. Ransomware

   • a type of malicious software designed to block access to a computer system until a sum of money is paid.

5. Trojan Horse

   • Trojan horse is a program that claims to rid your computer of viruses but instead introduces viruses onto your computer.

6. Brute Force Attack

   • Brute force is a trial and error method used by application programs to decode encrypted data such as passwords or Data Encryption Standard keys, through exhaustive effort rather than employing intellectual strategies.

7. Social Engineering

   • Social engineering is a technique used by criminals and cyber-crooks to trick users into revealing confidential information. The data obtained is then used to gain access to systems and carry out actions to the detriment of the person or organization whose data has been revealed.

8. Denial of Service

   • A denial-of-service attack is a security event that occurs when an attacker takes action that prevents legitimate users from accessing targeted computer systems, devices or other network resources

9. Data Interception

   • When packets travel across a network, they are susceptible to being read, altered, or “hijacked.” Hijacking occurs when a hostile party intercepts a network traffic session and poses as one of the session endpoints

10. Packet Sniffing

    • Packet sniffing, a network attack strategy, captures network traffic at the Ethernet frame level. After capture, this data can be analyzed and sensitive information can be retrieved. .

11. Message Tampering

    • Tampering is the act of altering a message, or the delivery of a message, and using the altered message for a purpose other than what it was intended for.

12. SQL Injection

    • SQL injection is a code injection technique that might destroy your database. SQL injection is one of the most common web hacking techniques. SQL injection is the placement of malicious code in SQL statements, via web page input

13. Anti Malware Software

    • Antimalware software uses three strategies to protect systems from malicious software, including signature-based malware detection, behavior-based malware detection and sandboxing. These techniques protect against threats from malware in different ways.
      • Many antimalware tools depend on signature-based malware detection. Malicious software can be identified by comparing a hash of the suspicious code with a database of hashes of known malware. Signature-based detection uses a database of known malware definitions to scan for malware.

14. Firewalls

    • A firewall controls access to the resources of a network through a positive control model. This means that the only traffic allowed onto the network is defined in the firewall policy; all other traffic is denied.

15. User Access Level

    • Part of an access control procedure for computer systems, which allows a system administrator to set up a hierarchy of users. Thus, the low level users can access only a limited set of information, whereas the highest level users can access the most sensitive data on the system

16. Password Strength Checker

    • A password strength meter shows how resistant a given password might be to password cracking attempts like brute force and dictionary attacks. Meters have rules they use to assign points for password hardening measures such as including a full combination of symbols, numbers, uppercase and lowercase letters. Simple names and words might receive a deduction in points, as might repeated letters.

17. Network Security Policies

    • A network security policy, or NSP, is a generic document that outlines rules for computer network access, determines how policies are enforced and lays out some of the basic architecture of the company security/ network security environment. The document itself is usually several pages long and written by a committee.

18. Storage Device Virus Scanning

    • It scans a storage device to determine if there is a virus on it, if it finds a virus it will stop access to the device.

19. Data Encryption

    • Encryption is the most effective way to achieve data security. To read an encrypted file, you must have access to a secret key or password that enables you to decrypt it. Unencrypted data is called plain text ; encrypted data is referred to as cipher text.

20. Penetration Testing

    • A penetration test, colloquially known as a pen test, is an authorized simulated attack on a computer system, performed to evaluate the security of the system.

21. Network Forensics

    • Network forensics is a sub-branch of digital forensics relating to the monitoring and analysis of computer network traffic for the purposes of information gathering, legal evidence, or intrusion detection. Unlike other areas of digital forensics, network investigations deal with volatile and dynamic information.