Network Security

Network Security

1. Network Prevention Methods

   • Anti-malware Software.
     • Anti-malware is anything that protects computers and systems against malware, including viruses, spyware and other harmful programs.
   • Firewalls
     • A firewall is software used to keep safe the security of a private network. Firewalls block unauthorised access to or from private networks and are often used to prevent Web users or illicit software from getting to private networks connected to the Internet.
   • User Access Levels
     • User-level security allows the administrator to group users with alike needs into common pools called workgroups. Permissions can then be given to the workgroups instead of to 1 user. Two default groups are given, the Admins group and the Users group.
   • Password Strength Checker
     • A password strength checker shows how strong a password might be to password cracking attempts like brute force and dictionary attacks. Checkers have rules they use to assign password hardening measures such as including all symbols, numbers, uppercase and lowercase letters.
   • Data Encryption
     • Encryption is were you use an algorithm to transform information to make it unreadable for unauthorised users. This method protects sensitive data such as credit card numbers by encoding information into unreadable cipher text. This encoded data may only be decrypted or made readable with a key.
   • Storage Device Virus Scanning
     • A virus scan is using anti-virus software to identify viruses in a device. It is an information security process that aims to identify threatening viruses and programs. It is the core feature of anti-virus software.
   • Penetration Testing
     • Penetration testing (pen-testing or pentesting) is a method of testing, measuring and improving security measures on information systems. Pen-testing is also known as a security assessment
   • Network Forensics
     • Network forensics means investigations that receive and analyse information about a network or network's events. Typically, network forensics refers to the specific network analysis that follows security attacks or other types of cybercrimes.

2. Network Vulnerabilities And Risks

   • Malware
     • 1. A drive-by download from an infected wbesite or Email with a virus link that hijacks the users browser. 2. These devises damage the boot sector, data files, software installed on the system and even the BOIS.
   • Phishing
     • 1. The attacker uses phishing emails to spread malicious links or attachments that can perform loads of functions, including the extraction of login details or account information from victims.
   • Ransomware
     • Ransomeware is where the data on a victim's computer is locked, mostly by encryption, and a payment is demanded before the data is decrypted and access returned to the victim.
   • Trojan Horse
     • A Trojan horse is a program that appears harmless, but is actually malicious. Attackers use Trojan horses as a way to trick users into installing malware. Typically, the malicious program is hidden in an email attachment or free program, such as a game.
   • Brute Force Attack
     • A brute force attack is a trial-and-error method used to get information such as a password or PIN number. In a brute force attack, automated software is used to generate numbers of consecutive guesses at the wanted data.
   • Denial of Service
     • A denial-of-service is a type of attack where the attackers attempt to prevent users from accessing a service. In a DoS attack, the attacker usually sends messages asking the network or server to authenticate requests that have invalid return addresses.
   • Man In the Middle
     • A man-in-the-middle (MITM) attack is a form of eavesdropping where communication between two users is monitored and modified by an unauthorized party.
   • Data Interception
     • Data theft is illegal transfer or storage of any information that is confidential, personal, or financial including passwords, software code, or algorithms, or technologies.
   • Packet Sniffing
     • Unauthorized interception of a privit conversation
   • Message Tampering
     • Illigally makeing changes to somthing you should not
   • SQL Injection
     • A computer attack in which code is embedded in a poorly designed application the data then produces database query results or actions that should never be executed.