Modern Network Security Threats

Modern Network Security Threats

1. Categories

   • DoS Attacks
     • Ping of Death
     • Smurf Attack
     • TCP SYN Flood Attack
   • Access
     • Trust exploitation
     • Password attacks
     • Port redirection
     • Man-in-the-middle attack
     • Buffer overflow
     • IP, MAC, DHCP Spoofing
   • Reconnaissance
     • Initiate a ping sweep of the target network
     • Initiate a port scan of active IP addresses
     • Run Vulnerability Scanners
     • Perform an information query of a target
     • Run Exploitation tools

2. Types

   • Virus
   • Worms
   • Troyan Horses
   • Malware
   • Access Attacks
   • Social Engineering Attacks
   • DoS Attacks

3. Tools

   • Rootkit Detectors
   • Network Scanning and Hacking Tools
   • Wireless Hacking Tools
   • Fuzzers
   • Packet Crafting
   • Packet Sniffers
   • Password Crackers

4. Mitigation Techniques

   • Mitigating Malware
   • Mitigating Worms
   • Mitigating Reconnaissance Attacks
   • Mitigating Access Attacks
   • Mitigating DoS Attacks

5. Methods

   • Through Browser
   • Evasives
   • Furtives
   • SSL
   • Malicious Use

6. Starts in the 2000's

7. A internal User can accidently or intentionally

   • Steal and Copy confidential data
   • Compromise internal servers or networks
   • Disconnect a critical network connection
   • Connect an infected USB drive

8. Data Loss

   • Improper Access Control
   • Hard Copy
   • Removable Media
   • Cloud Storage Devices
   • Unencrypted devices
   • Email/Social Networking

9. The Hackers

   • White Hat Hacker
   • Grey Hat Hacker
   • Black Hat Hacker

10. Malware

    • Worms
    • Viruses
    • Trojan Horses
    • Ransomware
    • Spyware
    • Adware
    • Pishing

11. Network Security Domains

    • Compliance
    • Security Policy
    • Business Continuity Management
    • Information Security Incident Management
    • Information Systems Acquisition, Development and Maintenance
    • Comunications and Operations
    • Physical and Enviromental
    • Human Resources
    • Asset Management
    • Organization of Information
    • Risk Assessment
    • Access Control