Network Security

Network Security

1. Network Prevention Methods

   • Anti-Malware Software
     • A piece of software designed to detect and delete malware on a computer/network. effective against Trojan horses
   • Firewalls
     • A network security system that regulates incoming and outgoing traffic to prevent malware from infecting the network. Effective against Trojan horses.
   • User Access Levels
     • Different users on a network have different privileges and are restricted from certain actions. Effective against Social Engineering
   • Password Strength Checker
     • A program that informs the user of how difficult it is to crack their password. Effective against brute force attacks.
   • Data encryption
     • This is where data is translated into a code so it cannot be read. This is effective against data interception
   • Storage Device Virus Scanning
     • A piece of software scans the storage device to find and delete malware. Effective against almost all forms of virus.
   • Penetration Testing
     • A white hat hacker is hired to test the network for any vulnerabilities effective against SQL injections/man in the middles/DDOS
   • Network Forensics
     • This is where events on a network are monitored and analysed to find the source of attacks. Effective against Many different viruses
   • Network Security Policies
     • A document that states how the users on the network should act on the network and what the company is going to do to keep it secure. Effective against a variety of different attacks

2. Network Vulnerabilities

   • DoS/DDoS
     • A DoS attack is where attackers flood a network with traffic in an attempt to slow or crash it
   • Brute Force Attack
     • This is where the the attacker uses trial and error to crack a password or PIN
   • Ransomware
     • Ransomware is a form of virus that locks access to data and demands money in return for access to the data.
   • Phishing
     • Phishing is where fraudulent emails are sent to convince the victim to divulge personal informartion
   • Malware
     • Malware is software designed to disrupt or gain unauthorised access to a computer
   • Trojan Horse
     • A program designed to breach the security of a computer while appearing as a harmless program
   • Social Engineering
     • This is where someone uses deception to find personal information. This can lead to theft.
   • Man in the Middle
     • The attacker intercepts data travelling between client and server. They can then capture or alter that data, leading to misinformation that could result in divulging personal information.
   • Data Interception
     • This is where packets are intercepted while travelling and are subsequently read. This could lead to a victim's bank account becoming insecure.
   • Packet Sniffing
     • This is where activity on a network is monitored, allowing attackers to read data you have sent and data you are to receive.
   • Message Tampering
     • This is where a message is altered in order to use it for a different purpose.
   • SQL Injection
     • This is where, in a poorly designed piece of software, malicious code is added in an attempt to gain more information than is intended to give.