Network security

Network security

1. Network vulnerabilities and risks

   • Malware
   • Trojan Horse
     • A malicious software that claims to be something it isn't in the hope that a network administrator will install it
   • Denial of Service
     • When you send too many fake data requests than the server can handle in order to prevent legitimate requests from going through
   • Phishing
   • Ransomware
     • Software that encrypts and "locks" your data until a ransom is paid
   • Brute Force Attack
     • Randomly guessing a password with software that tries millions of combinations per second
   • Social Engineering
     • Psychological manipulation of people into giving out data (passwords etc.)
   • Man in the Middle
   • Data Interception
     • When someone monitors data streams to or from a target, in order to gather sensitive information
   • Packet Sniffing/Eavesdropping
   • Message Tampering
   • SQL Injection

2. Network prevention methods

   • Data encryption
     • When you encrypt your data so that it can't be read before it reaches your computer and gets decrypted
   • Password strength tester
     • The password is checked to make sure it is very hard to brute force
   • Storage device virus scanning
     • When you scan your hard drive/ other type of storage for any malicious programs
   • Firewall
     • A system that monitors and controls incoming and outgoing network traffic based on predetermined security rules
   • Pen test
     • Running a controlled and authorised test on a system in order to find out what the vulnerabilities the system has
   • Network forensics
     • A sub-branch of digital forensics relating to the monitoring and analysis of computer network traffic for the purposes of information gathering, legal evidence, or intrusion detection
   • User access levels
     • At the highest level, the network manager can install and remove software, access all user areas and change permissions. At lower levels, a group of users may only be able to access particular pieces of software and their files stored in their own areas
   • Anti-malware software
     • A type of software program designed to prevent, detect and remove malicious software
   • Network security policies
     • A generic document that outlines rules for computer network access, determines how policies are enforced and lays out some of the basic architecture of the company security/ network security environment