Network Vulnerabilities

Network Vulnerabilities

1. Antivirus / Anti-Malware Programs

   • Anti-Malware programs can help stop malware attacks by identifying what type of malware/virus it is and removing it effectively. This can prevent attacks from most malware.

2. Firewall

   • A firewall is a network security system that will monitor and control incoming and outgoing network traffic. They usually create a "barrier" between a trusted internal and untrusted external network. This can prevent attacks from most malware.

3. User Access Levels

   • User Access Levels allow network managers to control the privileges of people in the network. Higher levelled people can access more than people in lower levels. This can block most malware that affect lower levels as it won't be able to delete / access files.

4. Password Strength Checker

   • A Password Strength Checker allows for a user to see if their password is too weak. If it says a password is too weak, the user should change their password to something stronger. This can prevent attacks from Brute Force Attacks as a stronger password means it is less likely to crack it.

5. Data Encryption

   • Data encryption is where data is encoded in a way that only certain people can access it can and those who shouldn't be able to can't. This can block most attacks because the malware may not have the encryption key to access the files.

6. Storage Device Virus Checks

   • Storage Device Virus Checks are where any storage on the device on the device (Internal or External) are scanned for viruses. This can stop most forms of malware.

7. Penetration Testing

   • Penetration testing is where an authorized simulation attack on a system in order to evaluate the security of the system. This blocks most kinds of attacks because of the fact most flaws are exposed.

8. Malware

   • Malware (malicious software) refers to any type of harmful or intrusive file. This can be anything from Trojans to Ransomware.

9. Ransomware

   • Ransomware is a form of malware that blocks access to files (normally by encryption). In order to gain access to the files again, they normally want money paid to them in an untraceable way (e.g. Bitcoin / Cryptocurrency) in order for a decryption key. They can refuse to give the key even if they pay.

10. Phishing

    • Phishing is a method of gaining people’s personal information by posing as a trustworthy site / email. People are usually redirected to a fake website that looks like the original website and it pushes users to input their personal info. They do this in order to gain personal info.

11. Trojan Horse

    • A Trojan horse is a type of malware that misleads the user in order to hide what it actually does. Some downloads are named something else in order to hide what they do (steal information).

12. Brute Force Attack

    • A brute-force attack is when an attacker attempts many passwords with the hope of eventually guessing correctly. They do this in order to access and steal data from systems.

13. Denial Of Service

    • Denial of Service is when an attacker makes a machine / network resource unavailable to users by disrupting host services. The attacker usually flood the server with requests in order to overload systems and stop any actual requests.

14. Social Engineering

    • Social Engineering is when an attacker attempts to deceive a user in order to gain personal info.