Network Security

Network Security

1. Network Vulnerabilities and Risks

   • DoS Attack
     • A Denial-of-Service attack is when somebody overwhelms a server, network or computer with traffic so that users can't access it or find it very hard to do so; this basically means the target has crashed.
   • Phishing
     • Phishing is when a user sends people dangerous links or attachements through emails to attempt to trick the other user to click on them; if they did, their computer could be sevearly harmed or their personal details could be stolen which can result in identity fraud (and much more).
   • Malware
     • Malware comes in multiple forms, nevertheless, the main goal of any malware is to infect your device and harm your computer.
       • Trojan
         • A trogan is something that pretends to be another software as well as allow other types of malware to enter your device depending on what the owner of it wants from you (such as your personal information).
   • Brute Force Attack
     • This attack forcefully tries to find your password by going through all possible passwords until it finds the password which you're using; this happens by a hacker programming a piece of software which goes through all combinations possible. If the hacker is eventually granted access to your device, they could steal all your data and have access to everything about you, this could easily lead to identity theft.
   • Social Engineering
     • This technique is when a hacker attempts to gain somebody's trust (usually by social media) and trick them into breaking normal security measures you'd usually use; this could mean giving away your password or any information about you, this could then result in identity theft or any type of data theft.
   • Man in the Middle
     • This attack is when somebody intercepts the information between two computers (usually companies) and listens to what each other are saying by taking their emails; in addition, they could also alter as well as use the computers to get thingd from each other but then take it for themselves. This is very dangerous to big companies, because when given access to their data, a hacker could gain money by using clients under the impression they work for the company.
   • Ransomware
     • Ransomware is when a software steals your information and threatens to either use, publish or lock you out of your information so you can't use it, the hack then forces you to pay a ransom for any of these not to happen; if you refuse to pay the ransom, your information coulb be seen by anybody who then could steal as well as use it.
   • Data Interceotion
     • This is when packets travel accross the neteork (usually when you're sending/downloading something) and can be intercepted by a hacker, this could then result in them either changing or stealing the information for themselves; if it included any personal information, it could result in identity theft.
   • Packet Sniffing
     • This software has the ability to spy on you whilst searching using the internet by either tracking your search history or what you're currently doing. This can result in your passwords being stolen, as well as your personal information.
   • Message Tampering
     • This is when a hacker is able to change messages as well as send them, this could result in them tricking you into giving them personal information which could result in identity theft.
   • SQL Injection
     • This is when somebody gains access to a database by using the username/password boxes to send a request to the database to grant them access to the website or network; they're then able to do whatever they want or even steal all the data.