Please enable JavaScript.

Coggle requires JavaScript to display documents.

DFT 20083 SECURITY BASICS AND IT PROFESSIONAL CHAPTER 1, Macximillian…

- - - - Malicious Code Attack
        
        Viruses
        
        • Malicious software - attached to another
        program to execute a particular unwanted function on the user workstation
        
        Trojan Horses
        
        application written to look like something else
        
        an attack tool
        
        Worms
        
        uses a malicious software to spread itself
        
        rely on security failures on the target computer to access it
        
        cause harm to the network
        
        create system
        vulnerabilities leading to back doors
        and
        other potential damages to files and
        computing systems
        
        may not be blocked
        by antivirus software on its own
      - Man-in-the-Middle Attack
        
        requires that the
        hacker have access to network packets that come across a network
      - Phishing
        
        social engineering attack - involves e-mail or other types of
        messages - attempt to trick others into
        providing sensitive information
      - Password Attacks
        
        can be implemented using brute-force attack (repeated attempts to identify
        users password)
        
        Methods for computing passwords
        
        Brute-force computation
        
        Dictionary cracking
        
        Brute Force attack -
        may result in denial of services - due to excessive traffic to a specific
        resource or by locking out user accounts
        
        attacker tries a large number of
        possibilities in rapid succession to gain access
        or crack the code
      - an attempt to access another user account
        or network device through improper means
    - - Reconnaissance Attack
        
        Port scans
        
        scanning to determine what
        network services/ ports are active on the live IP
        addresses
        
        Internet information queries
        
        queries the port
        to determine the application and operating
        system of targeted host
        
        determines the
        possible vulnerability exists that can be exploited
        
        Ping sweeps
        
        tell the attacker, which IP
        addresses are alive
        
        Packet sniffers
        
        to capture data being
        transmitted on a network
        
        Example:
        
        Sniffing
        
        Eavesdropping program that monitors information
        travelling over network
        
        Listening to a conversation-capturing such as
        username/password
        
        Spoofing
        
        Misrepresenting oneself by using fake e-mail
        addresses or masquerading as someone else
        
        Pretending to be someone else
        
        a primary step of
        computer attack.
        
        involve unauthorized
        discovery of targeted system
        to gather information
        about vulnerabilities.
        
        hacker surveys a network and collects
        data for a future attack.
      - Attack methods similar to standard DoS attack but operates on a much large scale
    - - implemented by a
        hacker - means of denying a service that is normally available to a user or organization
        
        involve either crashing the
        system or slowing it down until it is unusable
  - - - use a shredding
        machine designed for shredding
        these materials (floppy
        disks and CDs)
      - Hard drives
        that do not contain sensitive data
        can be reformatted and used in
        other computers.
  - - - boot sector is created and a file system is set up on the
        disk
      - performed after a
        low-level format has been completed
      - high-level formatting
    - - performed at the factory after
        the hard drive is built
      - surface of the disk - marked
        with sector markers - indicate where data will be stored
        physically on the disk, and tracks are created
- - - - Information theft
        
        Breaking into a computer to obtain confidential information
        
        Example; stealing an organization's proprietary information
        
        research
        
        development information
      - Identity theft
        
        A form of information theft where personal information is stolen for the purpose of taking over someone's identity
      - Data loss/manipulation
        
        Breaking into a computer to destroy or after data records
        
        Example of data loss: dropping your laptop hard drive can easily lead to data corruption, as can malware or a computer virus
        
        Example of data manipulation; breaking into a records system to change information, such as the price of an item
      - Discruption of service
        
        Preventing legitimate users from accessing services to which they should be entitled
    - - The context of computer security, that can happen the serious harm to a computer system.
      - It is something that may or may not happen, but hs the protential to cause serious damage.
      - It can lead to attacks on computer systems, networks and more
    - - Hacking
        
        Source of threat to security in computer
        
        Hackers are persons who learn about the computer system in detail
        
        Hackers may use a modern or cable to hack the targeted computers
      - Natural disaster
        
        Computers are also threatened by natural or environmental disaster
        
        Example;
        
        Flood
        
        Fire
        
        Earthquakes, storm and tornados
        
        Excessive heat
        
        Inadequate power supply
      - Malicious code
        
        Its cause by an agent, with the intention to cause damage
        
        Agent is writer of the code, or any person who causes its distribution
        
        Included virus,Trojan horse, worm and many others
      - Theft
        
        Computer is used to steal money, goods, information and resources
        
        Stealing of computer, especially notebook and PDAs
    - - Deleting files from a hard drives does not remove them completely from the computer
      - Data wiping is often performed on hard drives containing sensitive data that are considered confidential such as financial information
      - It known as secure erase is a software-based method of overwriting the data that aims to completely destroy all electronic data residing on a hard disk drive or other digital media.
- - - - Frequently used to describe the tasks of securing information that is in a digital format.
      - This digital information manupale by a microprocessor .
        
        Personal Computer
        
        Storage Device ( Hard Drive or USB Flash Drive)
        
        Transmitted over a network ( Local Area Network or the Internet)
    - - Link Title
    - - Information security can be best understood by examining its goals and the process of how it is accomplished
      - Information Security Goal
        
        Ensure protectice measures are properly implented to defend against attack
        
        Prevent the total collapse of the system when succesful attack does occur
      - Information Security define as
        
        Integrity
        
        Availability
        
        Confidentiality
    - - Information security is intended to protect information that provides value to people and organization
      - 3 protections that must be extended over information
        
        CONFIDENTIALITY
        
        Preserving authorized restriction on access and disclosure of information to who only the people who are authorized
        
        Throuh this method , a company able to prevent highly sensitive and vital information from getting access by wrong people
        
        INTEGRITY
        
        Maintaining data in a consistent , accurate and trustworthly manne over the period
        
        The right procedures have to taken ensure that unauthorized people do not alter the data
        
        AVAILABILITY
        
        Maintenance of all resources and hardware
        
        Hardware and resources have a funtional all the time
        
        It can also involve carrying out of regular hardware repairs
    - - Cracker / Intruder / Attacker
        
        Called as Black Hat
        
        Work for themselves
        
        Breaking into or violate the system integrity of remote machines with malicious intent
        
        Have unauthorised access,cracker detroy vital data , deny legitimate users service or cause problems for their target
        
        Easily identified because their actions are malicious
        
        https://www.youtube.com/watch?v=iU3YRKQnb6s
      - Hacker
        
        Called as White Hat
        
        Hired by companies
        
        A person intesely intrested in the arcane and recondite working on any operating system computer
        
        Obtain advanced knowledge of OS and Programmung Languages
        
        Seeking further knowledge , freely share what they have discovered and never intentionally damage data
        
        https://www.youtube.com/watch?v=JKOIRnVTjNM
    - - A social engineer is a person who is able to gain access to equipment or a network by tricking people into provideing the necessary access information
      - Social Engineering cont.
        
        To protect against social engineering
        
        Never give out a password
        
        Always ask for the ID of the unknown person
        
        Escort all visitors
        
        Never post your password
        
        Do not let anyone follow you through a door that requires an access card
- - - - such as shell scripts
        and password crackers.
    - - challenging a hacker’s skills can do
        serious damage to a company.
    - - Virus
        
        A program capable of replicating with little or no user
        intervention, and the replicated programs also replicate.
      - Worm
        
        A form of virus that spreads by creating duplicates of itself on
        other drives, systems, or networks.
      - Trojan horse
        
        An apparently useful or amusing program, possibly a game or
        
        screensaver, but in the background it could be performing other
        
        tasks, such as deleting or changing data, or capturing passwords
        or keystrokes
- - - - Nmap is one of the most important tools available for
        cybersecurity professionals,network engineers, and
        system administrators.
      - Nmap allows you to scan networked devicesand
        determine what ports are open
    - - is a command-line utility to view of active ports
        on your machine and their status.
        
        helps user to
        understand which ports are openclosed, or listening for
        incoming connections.
        
        Common attacks may include port 21 (FTP)and port 23
        (telnet). hacker can connect to these ports to obtain
        view of the directory structure, download and so on.
        
        NetScan
        
        is a software to perform network
        scanning.
        
        This software are so
        complete that, depending on the person
        
        sometimes categorized as a hacking
        tool.