Network Vulnerabilities

Network Vulnerabilities

1. Malware

   • Malware is a software which is specifically designed to disrupt, damage, or gain authorised access to a computer system.
   • The goal of malware is to collect information and data on users and observe their activity without users' knowledge.
   • Other types of malware include functions or features designed for a specific purpose.
   • We can buy anti-virus software to protect and defend our computers from malware attacks .
   • Ransom ware, for example, is designed to infect a user's system and encrypt the data.

2. Phishing

   • Phishing scams are attempts by scammers to trick you into giving out personal information such as your bank account numbers, passwords and credit card numbers.
   • Hacking is using exploits to gain access to something you do not normally have access to. Phishing is masquerading as a trustworthy source in an attempt to bait a user to surrender sensitive information such as a username, password or credit card number.
   • To prevent bank phishing and credit card phishing scams, you should personally check your statements regularly. Get monthly statements for your financial accounts and check each and every entry carefully to ensure no fraudulent transactions have been made without your knowledge.

3. Ransomeware

   • Is a type of malicious software designed to block access to a computer system until a sum of money is paid.
   • Ransomware attacks are typically carried out using a Trojan that is disguised as a legitimate file that the user is tricked into downloading or opening when it arrives as an email attachment.
   • However, one high-profile example, the "WannaCry worm", traveled automatically between computers without user interaction.

4. Trojan

   • Trojan Horse hides malware in what appears to be a normal file.
   • There are a wide variety of Trojan viruses on the Internet landscape that can perform an array of tasks.
   • Most Trojans are typically aimed at taking control of a user’s computer, stealing data and inserting more malware on to a victim’s computer.

5. Brute Force Attack

   • Brute force (also known as brute force cracking) is a trial and error method used by application programs to decode encrypted data such as passwords or Data Encryption.
   • Standard (DES) keys, through exhaustive effort (using brute force) rather than employing intellectual strategies.

6. Denial Of Service

   • a denial-of-service attack (DoS attack) is a cyber-attack where the perpetrator seeks to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a host connected to the Internet.
   • Denial of service is typically accomplished by flooding the targeted machine or resource with superfluous requests in an attempt to overload systems and prevent some or all legitimate requests from being fulfilled.

7. Social Engineering

   • Social engineering, in the context of information security, refers to psychological manipulation of people into performing actions or divulging confidential information.
   • A type of confidence trick for the purpose of information gathering, fraud, or system access, it differs from a traditional "con" in that it is often one of many steps in a more complex fraud scheme.

8. Man In The Middle

   • Man-in-the-middle attack (MITM) is an attack where the attacker secretly relays and possibly alters the communication between two parties who believe they are directly communicating with each other.
   • One example of man-in-the-middle attacks is active eavesdropping, in which the attacker makes independent connections with the victims and relays messages between them to make them believe they are talking directly to each other over a private connection, when in fact the entire conversation is controlled by the attacker.
   • The attacker must be able to intercept all relevant messages passing between the two victims and inject new ones. This is straightforward in many circumstances; for example, an attacker within reception range of an unencrypted wireless access point (Wi-Fi) could insert himself as a man-in-the-middle

9. Data Interception

   • Data interception and theft. Introduction. Each time any communication is sent across a network, whether it is a Local Area Network or a Wide Area Network, it is split up into packets and sent by various routes.

10. SQL Injection