Please enable JavaScript.

Coggle requires JavaScript to display documents.

INTRODUCTION TO SECURITY, 1.2.2 Sources of Security Threats, AHMAD, FAIQAH…

- - - - -The tasks of securing
        information that is in a digital format.
        
        -This digital information is manipulated by a
        microprocessor(Personal Computer).
        
        Stored on :
        
        Hard drive or USB flash drive.
        
        Enable to transmit over network:
        
        -Local area network and the internet.
      - -Goal of information security is to ensure that protective measures are properly implemented to defend against attacks.
      - Definition:
        
        -Protects the integrity,confidentiality,and availability of
        information on the devices that store.
        
        -Manipulate, and transmit the information through products, people, and procedures.
        
        -Protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction.
    - - Integrity
        
        -Guarding against improper information modification or destruction.
        
        -Ensuring information nonrepudiation and authenticity.
        
        -Integrity ensures that the information is correct and no unauthorized person or malicious software has altered the data.
      - Availability
        
        -Ensuring timely and reliable access to and use
        of information.
        
        -Information has value if the authorized parties who are assured of its integrity can access the information.
        
        -Availability ensures that data is accessible to
        authorized users.
      - Confidentiality
        
        -Preserving authorized restrictions on access
        and disclosure.
        
        -For example,protecting
        personal privacy and proprietary information.
        
        -Ensures that only authorized parties can view the information.
      - -Information security is intended to protect information that provides
        value to people and organizations.
    - - Attacker
        
        Referred as Black Hat.
        
        Work for themselves.
        
        Someone who break into the system.
        
        Having gained unauthorised access, crackers destroy vital data, deny legitimate users service or cause problems for their targets.
        
        Can easily be identified.
      - Hacker
        
        Referred as White Hat.
        
        Hired by companies.
        
        Is a person intensely interested in the arcane and recondite working of any computer operating system.
        
        Obtain advanced knowledge of operating systems and programming language.
        
        Constantly seek further knowledge, freely share what they have discovered and never intentionally damage data.
- - - - the effect caused by an agent with the intention to cause damage.
        -the agent is the writer of the code or any person who causes its distribution
        
        various kinds of malicious code include virus, trojan horse , worm and others
    - - a source of threat to security in computer . it is defined as unauthorized access to the computer system by a hacker.
        -hackers are persons who learn about the computer system in detail.
        
        hackers may use a modem or cable to hack the targeted computers
    - - two types of computer theft
        
        computer is used to steal money , goods information and resources.
        
        stealing of computer especially notebook and PDAs.
    - - computers are also threatened by natural or environment disaster .
        
        example
        ~ flood
        ~fire
        ~ earthquakes, storms, tornados
        ~excessive heat
        ~inadequate power supply
  - - - identify theft
        
        a form of info theft where personal info is stolen for the purpose of taking over someone's identity . using this info an individual can obtain legal documents, apply for credit and make authorized online purchases
        
        data loss/manipulation
        
        breaking into a computer to destroy data records
        
        ~ example of loss data : sending a virus that reformats a computer hard drives .
        ~ example of manipulation : breaking into a records system to change information , such as the price of an item
        
        disruption of service
        
        preventing legitimate users from accessing services to which they should be entitled
- - - - 1.Ping sweeps (tell the attacker, which IP
        addresses are alive)
      - 4.Packet sniffers (to capture data being
        transmitted on a network)
      - 2.Internet information queries(queries the ports
        to determine the application and operating system of targeted host and determines the possible vulnerability exists that can be exploited)
      - 3.Port scans(art of scanning to determine what network service or ports are active on the live IP address.
      - Examples of Reconnaissance Attack:
        
        Sniffing:• Eavesdropping program that monitors information that travelling over network
        • Listening to a conversation – capturing such as username or password
        
        Spoofing:• Misrepresenting oneself by using fake e-mail
        addresses or masquerading as someone else
        • Pretending to be someone else
        
        By:Ahmad Fakhrurizzudin Bin Ahmad Fairuz
        
        1.5 ACCESS TO DATA AND EQUIPMENT
        
        1.5.1 Data Wiping
        
        Deleting files from a hard drive does
        not remove them completely from the
        computer.
        
        This data is not completely removed
        until the hard drive stores other data in
        the same location, overwriting the
        previous data.
        
        2 more items...
        
        Data wiping, also known as secure
        erase is a software-based method of
        overwriting the data that aims to
        completely destroy all electronic data residing on a hard disk drive or other
        digital media.
        
        1.5.2 Hard Drive Destruction
        
        • Companies with sensitive data should
        always establish clear policies for hard
        drive disposal.
        
        It is important to be aware that formatting
        and reinstalling an operating system on a
        computer does not ensure that information
        cannot be recovered.
        
        1 more item...
    - - •An access attack is just what it sounds like an attempt to access another user account or network device through improper means.
      - •Access attack can consist of the following:• Password Attack• Man-in-the-Middle Attack• Phishing
        
        Password Attack:• Password attacks can be implemented using brute-force attack (repeated attempts to identify users password).• Methods for computing passwords:1. Dictionary cracking 2. Brute-force computation
        
        • A Brute Force attack is another type of attack that may result in denial of services. • With brute force attacks, a fast computer is used to try to guess passwords or to decipher an encryption code.• The attacker tries a large number of possibilities in rapid succession to gain access or crack the code.• Brute force attacks can cause a denial of service due to excessive traffic to a specific resource or by locking out user accounts.
        
        Man-In-The-Middle Attack:• A man-in-the-Middle attack requires that the hacker have access to network packets that come across a network.
        
        • Phishing is a type of social engineering attack that involves using e-mail or other types of messages in an attempt to trick others into providing sensitive information.
    - - • DoS attacks involve either crashing the
        system or slowing it down to the point that it
        is unusable.
      - • DoS attacks are often implemented by a
        hacker as a means of denying a service that is normally available to a user or
        organization.
    - - • Malicious code is the kind of harmful
        computer code designed to create system vulnerabilities leading to back doors and
        other potential damages to files and computing systems.
        
        • Worms
        • It uses a malicious software to spread itself, relying on security failures on the target computer to
        access it.• Worms cause harm to the network.
        
        Distribution
        
        Characteristic
        
        Replicates itself,and propagated with human
        intrusion
        
        Replicate itself
        and propagated without human
        intrusion
        
        2 more items...
        
        Virus
        
        Effect to system
        
        Viruses can erase
        files and applications,
        crash your system
        
        System hang or
        slow
        
        2 more items...
        
        Via email
        attachments,downloaded files,instant messages or via diskette, CD or USB devices
        
        Through email or
        file transfer
        
        By opening an
        email attachmentor downloading
        and running a file from the internet
        
        1 more item...
        
        • Viruses
        • Malicious software that is attached to another program to execute a particular unwanted function
        on the user workstation.
        
        • Trojan Horses
        • An application written to look like something else that in fact is an attack tool.
      - • It’s a type of threat that may not be blocked
        by antivirus software on its own
    - - • DDoS uses attack methods similar to standard
        DoS attack but operates on a much large scale
- - - - Netstat is a command-line utility to view of active ports on your machine and their status. The information provided by netstat conveys an accurate assumption of how vulnerable PC might be to attacks on various ports. Common attacks may include port 21 (FTP) and port 23 (telnet). A hacker can connect to these ports to obtain view of the directory structure, download and upload files, and, if the password is compromised, connect to the host with complete control.
    - - Netscan is a software to perform network scanning to determine the active device and its corresponding IP and can also monitor the local computer network (LAN). This software are so complete that, depending on the person, can be used to disturb even cripple or take over the network.NetScan sometimes categorized as a hacking too.
    - - Network Mapper(Nmap) is anything connected to a network that offers services such as a printer,a router or a web server has open ports to accept connection requests. If too many ports are open,the device might be vulnerable to attack.Nmap is one of the most important tools for cybersecurity professionals, network engineers, and system administrators because Nmap allows you to scan networked devices and determine what ports are open so that you can learn what services they're exposing on the network, verify firewall configurations, or perform testing and troubleshooting.
- - - - A form of virus that spreads by creating duplicates of itself on other drives, systems, or networks. A worm working with an e mail system can mail copies of itself to every address in the email system address book. Code Red and Nimda are examples of high-profile worms that have caused significant damage in recent years.
    - - An apparently useful or amusing program, possibly a game or screensaver, but in the background it could be performing other tasks, such as deleting or changing data, or capturing passwords or keystrokes. A true Trojan horse isn’t technically a virus because it doesn’t replicate itself.
    - - A program capable of replicating with little or no user intervention, and the replicated programs also replicate.