Network Security

Network Security

1. Network Vulnerabilities and Risks

   • Malware
     • This is software that is specifically designed to gain access or damage a computer without the knowledge of the owner. There are various types of malware including spyware, key-loggers, true viruses, worms, or any type of malicious code that infiltrates a computer. How does malware work? Malware typically infects a machine by tricking users into clicking and/or installing a program that they shouldn’t from the Internet. When the click or installation occurs, the malicious code executes actions that the user doesn’t anticipate or intend, which could include: Self-replication in different parts of the file system Installing applications that capture keystrokes or commandeer system resources, often running without the user being aware, while slowing the system down considerably Blocking access to files, programs or even the system itself, sometimes forcing the user to make a payment to regain access Bombarding a browser or desktop with ads Breaking essential system components.
   • Phishing
     • Phishing scams are attempts by scammers to trick you into giving out personal information such as your bank account numbers, passwords and credit card numbers. Phishing attacks typically rely on social networking techniques applied to email or other electronic communication methods, including direct messages sent over social networks, SMS text messages and other instant messaging modes. Phishers may use social engineering and other public sources of information, including social networks like LinkedIn, Facebook and Twitter, to gather background information about the victim's personal and work history, his interests, and his activities. Pre-phishing attack reconnaissance can uncover names, job titles and email addresses of potential victims, as well as information about their colleagues and the names of key employees in their organizations. This information can then be used to craft a believable email.
   • Ransomware
     • Ransomware is a subset of malware in which the data on a victim's computer is locked, typically by encryption, and payment is demanded before the ransomed data is decrypted and access returned to the victim. The motive for ransomware attacks is nearly always monetary, and unlike other types of attacks, the victim is usually notified that an exploit has occurred and is given instructions for how to recover from the attack. Payment is often demanded in a virtual currency, such as bitcoin, so that the cyber criminal's identity isn't known. Ransomware malware can be spread through malicious email attachments, infected software apps, infected external storage devices and compromised websites. A growing number of attacks have used remote desktop protocol and other approaches that don't rely on any form of user interaction. In a lockscreen variant of a ransomware attack, the malware may change the victim's login credentials for a computing device.
   • Trojan Horse
     • One of the most insidious types of Trojan horse is a program that claims to rid your computer of viruses but instead introduces viruses onto your computer. The term comes from the a Greek story of the Trojan War, in which the Greeks give a giant wooden horse to their foes, the Trojans, ostensibly as a peace offering. Attackers have long used Trojan horses as a way to trick end users into installing malware. Typically, the malicious programming is hidden within an innocent-looking email attachment or free program, such as a game. When the user downloads the Trojan horse, the malware that is hidden inside is also downloaded. Once inside the computing device, the malicious code can execute whatever task the attacker designed it to carry out. A Trojan horse containing malware may also be referred to as simply a Trojan or a Trojan horse virus. Unlike a true virus, however, malware in a Trojan horse does not replicate itself, nor can it propagate without the end user's assistance.

2. Network prevention methods