Network Security

Network Security

1. Network Prevention methods

   • Common Sense/User Access levels
     • If people who click on a link called 'You have won £10,000,00' they obviously haven't thought about it.
     • This could prevent Phising as you could just block the sender of the email.
   • Anti-Malware Software
     • This software reads and detects file if it finds malware it will terminate the file or software.
   • Firewall
     • They are like a filter between a computer and its network it detects things you want in and things you want out
   • Password Strength checker
     • This will help stop hackers and other people loginining in to your account and other systems that require a password if you have a strong password
   • Data Encryption
     • This works by letting users to encrypt data and hide it from other users
   • Storage device virus scanning
     • This is when the storage device scans

2. Network Vulnerabilities

   • Malware
     • Short for malicious software
     • It's basically any program/file that is harmful to a computer or user
     • You could loose personal data like bank information
     • It works by trying to convince you to open a link or download something but when you click it downloads malware onto your software/computer
   • Phising
     • Phishing is the attempt to obtain]] such as usernames, passwords, and credit card details, often for malicious reasons, by disguising as a trustworthy entity in an electronic communication.
   • Ransomware
     • Ransomware is a type of malicious software from cryptovirology that threatens to publish the victim's data or perpetually block access to it unless a ransom is paid.
   • Trojan Horse
     • Trojan horse is a program that claims to rid your computer of viruses but instead introduces viruses onto your computer.
   • Brute Force Attack
     • It is a trial and error method used by application programs to decode encrypted data such as passwords or Data Encryption Standard (DES) keys, through exhaustive effort (using brute force) rather than employing intellectual strategies.
   • Denial of service
     • It is cyber-attack where the perpetrator seeks to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a host connected to the Internet.
   • Social Engineering
     • It is the process of socially manipulating a victim to give out personal information that could be used in fraud.
   • Man in the middle
     • This attack involves listening to peoples conversations and possibly block and inteupt communication
   • Data Interception
     • When data packets travel across a network they can be read, altered or hijacked
     • It happens when someone acts/poses as a networks traffic endpoint.The attackers monitors a targets stream in order to get some valuable data e.g. bank information
     • The risks of this is that data can be intercepted and read and also the risk of data theft and valuable data exposed
   • Packet Sniffing/Eaves Dropping
     • A sniffer is an application that can capture network packets.
   • Message Tampering
     • As it says it the process of tampering with messages.
   • SQL injection
     • This type of attack allows the attacker to tamper with already existing data and even cancel and change transactions
     • An SQL injection works by 'code injection' technique that exploits a security vulnerability occuuring in a database layer of an application.

3. 16/01/18