network security

network security

1. network prevention methods

   • anti malware software
     • protects against infections caused by all types of malware. it can be installed on an individual computing device , gateway server or dedicated network appliance
     • protects against all types of malware
   • firewalls
     • a firewall is a security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules
     • protects against SQL injections
   • user access levels
     • allows a admin to set up a hierarchy of users. thus the low level users can access only a limited set of information whereas the highest level users can access the most sensitive information
     • helps protect against ransomware
   • password strength checker
     • is an indicator either in graphical or text form, of the strength of a password as entered by the user they cn assign points for passwords e.g. upper and lower case, symbols and numbers this can help prevent brute force attacks
     • helps prevent Brute force attacks
   • data encyption
     • Encryption is the most effective way to achieve data security. To read an encrypted file, you must have access to a secret key or password that enables you to decrypt it
     • protects against data interception
   • storage device virus scanning
     • protects data by killing malware at the source it can detect and protect the spread of malicious virus code before your data is compromised
     • protects against all types of malware
   • penetration testing
     • practise of testing a computer system, network or web application to find weaknesses that an attacker could exploit
     • helps protect against phishing
   • Network Forensics
     • a sub-branch of digital forensics relating to the monitoring and analysis of computer network traffic for the purposes of information gathering, legal evidence, or intrusion detection
     • protects against MITM attacks
   • network security policies
     • a generic document that outlines rules for computer network access, determines how policies are enforced and lays out some of the basic architecture of the company security/ network security environment
     • helps protect against ransomware

2. network vulnerabilities and risks

   • brute force attack
     • is a trial and error method for decoding encypted data such as passwords or DES instead of using intellectual strategies
   • SQL injection
     • is a code injection technique used to attack data driven applications it might destroy your database
   • packet sniffing
     • can be used to spy on network traffic and collecting passwords
   • Trojan horse
     • is a malicious program which misleads users of it true intent
   • man in the middle
     • A MITM attack is where the attacker secretly relays and possibly alter the communication between two parties who believe they are directly comunicating
   • phishing
     • is the attempt to obtain sensitive information e.g. usernames and passwords
   • Malware
     • can be activated by visiting a website and can send emails disguised as legitimate messages or attachments can deliver the malware to unsupecting users
   • ransomware
     • ransomware is a type of malicious software that threatens to publish the victim's data or perpetually block access to it unless a ransom is paid.
   • denial of service
     • is a cyber attack where the perpetrator makes a machine or network temporarily unavailable to its intended user
   • social engineering
     • refers to the psychological manipulation of people into performing actions or divulging confidential information
   • data intercepton
     • occurs when a hostile party intercepts a network traffic session or poses as one of its end points the attacker monitors data streams to or from the target in order to gather sensitive information
   • message tampering
     • the delivery of a message, and using the altered message for a purpose other than what it was intended for.