Network Security

Network Security

1. Network Vulnerabilities and Risks

   • DoS/DDoS
     • A software that allows a computer to control and computers hardware and peripheral devices.
   • Trojan
     • A malicious software disguised as a safe secure software used by hackers and cyberthieves to access blocked or inaccessible content.
     • Once inside the system the Trojan allows them to delete, steal, modify or block information.
   • Malware
     • A malicious software used to access information and damage others reputations.
   • Phishing
     • A malware that purposefully attracts a user to click on it by tricking into thinking it is a legitimate email.
   • Ransomware
     • A malware where the users computer is blocked and they have to pay a fee to unlock it again.
   • Brute Force Attack
     • A trial and error method using a software of guessing a computers password or sensitive information and steal or delete information.
   • Denial of Service
     • Where an attacker floods the users network with traffic causing it to crash.
   • Social Engineering
     • This is where an attacker tricks a user into breaking normal security procedures and accessing their computer and stealing information.
   • Man in Middle
     • This is where hackers intercept data travelling between client and server to steal information.
   • Data Interception
     • Where packets are intercepted while travelling and are read by the hacker. This will lead to data being stole or deleted.
   • Packet Sniffing
     • This is where software interceptsand logs network traffic allowing the packet "sniffing" software to access and look at a computer device.
   • SQL Injection

2. Network Prevention Methods

   • Anti-Malware Software
     • A device designed to detect and delete any malware on the computer.
   • Firewalls
     • A network security system used to control incoming and outgoing netwrok traffic and block access to certain sites and programmes.
   • User Access Levels
     • Different roles, privileges and access abilities applied to certain people. Used to block some people from accessing important information they don't require top know.
   • Password Strength Checker
     • A computer system used to check the strength of a password.
   • Data Encryption
     • Data is translated into a code so that it can't be read. This can be effective against packet sniffing.
   • Storage Device Virus Scanning
     • A piece of software scan the storage device and deletes any malware that it finds.
   • Penetration Tesiting
     • A white hat hacker is hired by a company to test for any weakness in a network security system. This used to prevent malicious hackers that may attempt to steal information.
   • Network Forensics
     • This is where the events of a computer is monitored and analysed to find the source of the attacks. It would be effective against most risks and viruses.
   • Network Security Policies
     • A document that states various policies to protect a network for a company from malware and hacking.