Network security revision

Network security revision

1. Passive attack

   • Can be prevented by
     • Using encryption ✓ Using network forensics

2. Brute force attack

   • Can be prevented by
     • Using strong passwords ✓ Locking accounts after a certain number of login attempts ✓ Using 2 step verification (e.g. a code sent to mobile phone to confirm identity) ✓ Using penetration testing

3. Malware

   • Can be detected and prevented by
     • Running anti-malware software regularly ✓ NOT downloading software from unknown sources can send and receive data packets, so that only authorised users & trusted programs can access the network. ✓ NOT clicking on unknown links ✓ Scanning downloaded files before opening them ✓ NOT using removable media (e.g. a USB drive) as they may contain malware ✓ Using automatic software updates: up-to date software will include patches for known vulnerabilities and up-to-date anti malware uses the most current database of threats

4. Social engineering threats

   • Can be detected and prevented by
     • Using an effective network policy ✓ Ensuring users have strong passwords ✓ Using biometric identification measures ✓ Installing physical security (e.g. locked rooms) ✓ Ensuring user privacy settings on any social media are set to maximum so that attackers cannot find information about users (e.g. date of birth, address) ✓ Ensuring user awareness of unsolicited texts, emails and phone calls. Users should not give personal, confidential information away ✓ Applying email filtering to prevent suspect emails getting through. ✓ Ensuring that users check the URL in the website address. ✓ Using a website filter ✓ Ensuring users are aware of who is around them when they are typing in their password.

5. Encryption

   • scrambles the data packets being sent and received across the network or outside the network so that unauthorised users cannot access personal information without the encryption key.

6. user access levels

   • control which part of the network users can access. User access levels are used to limit the number of people with access to important data, helping to prevent inside attacks on the network.

7. penetration testing

   • is used to identify possible weaknesses in a network’s security by trying to exploit them. The results are then reported back and any weaknesses are fixed. A white box penetration test is used to simulate an inside attack where the attacker may have some knowledge of the system and basic credentials. A black box penetration test is used to simulate an outside attack

8. Network policy

   • is a set of rules and procedures that an organisation will follow to ensure their network is protected against attacks. An effective network policy will encrypt sensitive data, have an acceptable use policy, install ant-malware and install a firewall. The policy will also enforce the use of strong passwords that are changed regularly and will enforce the regular testing of the network for weaknesses.