Network Security

Network Security

1. Network Vulnerabilities and Risks

   • Software which is specifically designed to disrupt, damage, or gain authorized access to a computer system.
   • Malware
   • Phishing
     • The fraudulent practice of sending emails purporting to be from reputable companies in order to induce individuals to reveal personal information, such as passwords and credit card numbers.
   • Ransomware
     • A type of malicious software designed to block access to a computer system until a sum of money is paid.
   • Trojan Horse
     • A program designed to breach the security of a computer system while ostensibly performing some innocuous function.
   • Brute Force Attack
     • A brute force attack is a trial-and-error method used to obtain information such as a user password or personal identification number (PIN). In a brute force attack, automated software is used to generate a large number of consecutive guesses as to the value of the desired data.
   • Denial of Service
     • An interruption in an authorized user's access to a computer network, typically one caused with malicious intent.
   • social engineering
     • The use of deception to manipulate individuals into divulging confidential or personal information that may be used for fraudulent purposes.
   • Man in the Middle
     • Is an attack where the attacker secretly relays and possibly alters the communication between two parties who believe they are directly communicating with each other.
   • Data Interception
     • The unauthorized taking or interception of computer-based information. Data theft is the act of stealing computer-based information from an unknowing victim with the intent of compromising privacy or obtaining confidential information.
   • Packet Sniffing / Eavesdropping
     • Eavesdropping is as an electronic attack where digital communications are intercepted by an individual whom they are not intended. This is done in two main ways: Directly listening to digital or analog voice communication or the interception or sniffing of data relating to any form of communication.
   • Message Tampering
     • The illegal act of touching or making changes to something when you should not: Medications are sent in sealed factory containers which protect against tampering. tampering with sth They were charged with tampering with evidence.
   • SQL Injection
     • An SQL injection is a computer attack in which malicious code is embedded in a poorly-designed application and then passed to the backend database. The malicious data then produces database query results or actions that should never have been executed.

2. Network Prevention Methods

   • Anti-malware Software
     • Is computer software used to prevent, detect and remove malicious software.
   • Firewalls
     • A firewall protect a network or system from unauthorized access with a firewall.
   • User Access Level
     • Part of an access control procedure for computer systems, which allows a system administrator to set up a hierarchy of users. Thus, the low level users can access only a limited set of information, whereas the highest level users can access the most sensitive data on the system.
   • Password Strength Checker
     • A password strength meter is an indicator, either in graphical or text form, of the strength of a password as entered by a user.
   • Data Encryption
     • The translation of data into a secret code. Encryption is the most effective way to achieve data security. To read an encrypted file, you must have access to a secret key or password that enables you to decrypt it.
   • Storage Device Virus Scanning
     • Antivirus or anti-virus software is computer software is used to prevent, detect and remove malicious software.
   • Penetration Testing
     • you do this to testing a computer system, network or Web application to find vulnerabilities that an attacker could exploit.
   • Network Forensics
     • Network forensics is a branch of digital forensics relating to the monitoring and analysis of computer network traffic for the purposes of information gathering, legal evidence, or intrusion detection.
   • Network Security Policies
     • Is a generic document that outlines rules for computer network access