Network Security

Network Security

1. Attacks

   • brute force
     • strong passwords, 2 step verification, locking accounts after a number of incorrect attempts
   • passive (data interception)
     • data encryption, penetration testing, network forensics
   • DDoS (distributed denial of service)
     • firewall
   • insider attack

2. Threats

   • malware
     • run anti-malware software, only download software from reliable sources, automatic software updates
   • SQL Injection
     • penetration testing, validating user input, prepared statements
   • social engineering
     • user access levels, email filtering, biometric identification measures

3. Solutions

   • network forensics
     • capturing, recording and analysis of data transfers over network traffic, could be used through packet sniffing software and web server logs to show when data was last accessed
   • penetration testing
     • identifies possible weaknesses within a network's security by trying to exploit them. The results state what the weaknesses are and how to fix them. A white box test simulates an insider attack, while a black box simulates an outsider attack.
   • data encryption
     • scrambles data packets so unautharised users can't access the data without an encryption key
   • network policy
     • a set of rules and procedures an organisation will follow to help defend against attacks. An effective policy consists of data encryption, anti-malware, firewall, strong passwords and acceptable use policy.
   • user access level
     • controls which part of the network users can access, and limit who can access important data, helping prevent insider attacks