Types Of Security Threats | Top Q&A

Now that you have a basic understanding of the types of weaknesses you have to deal with in a security solution, this section moves on to some of the many security threats your network faces. As I mentioned earlier, your network can face thousands of threats daily. The Computer Security Institute (CSI) conducted a study on cybersecurity threats and security breaches and found that, of all the companies polled, 70% had some kind of security breach. These security threats can be classified as external versus internal and unstructured versus structured.

External users
Insiders

Read more: Camphor Glass Early History and Origins An external security threat occurs when someone outside your network creates a security threat to your network. If you’re using an intrusion detection system (IDS), which detects attacks as they happen, you may be in for a slight shock at the number of attacks and probes that happen to your network. daily. network poses a security threat to your network. Interestingly, CSI research has found that, of the 70% of companies with security breaches, 60% of these breaches come from internal sources. Some of these security breaches are malicious; others are accidental. Therefore, you should not only be concerned with securing the perimeter of your network, you should also aim to protect any important resources and services. This topic is discussed in more depth in Chapter 2, “Introduction to Firewalls”.

Unstructured threats
Structured Threats

Read more: 75kg in pounds An unstructured security threat is one created by an inexperienced person trying to gain access to your network? A good security solution will easily prevent this type of attack. Many tools are available to anyone on the Internet that can be used to uncover weaknesses in a company’s network. These include port scanners, address scanners, and more. Most of these types of exploration are done out of curiosity rather than malicious intent. This is especially true for internal users interested in what kind of devices exist on their network. On the other hand, a structured security threat is made by a technical person trying to gain access to your network. This hacker creates or uses some very sophisticated tools to break into your network or disrupt the services running in your network. A good example of a structured attack is a distributed ICMP burst. Someone with very little hacking skills will likely send a large amount of pings from the same source machine, making it fairly easy to track down the culprit. On the other hand, a sophisticated hacker would try to conceal the source of ICMP packets by altering the source address inside the packets (known as spoofing), as well as performing an attack from a number of different sources. Finding the culprit of this type of attack takes a lot of work and patience. Figure 1-2 shows a simple example of a sophisticated spoofing attack. In this example, the hacker changes the source address in the ICMP packets to the address of Server C, which is the device the hacker is attacking. He sends these packets to both Server A and Server B. Figure 1-2. Sophisticated phishing attackThese servers respond to ICMP messages to the destination listed as the source in the packets, Host C. In this example, with the hacker flooding the packets to both Host A and Server B, respectively. , attack Server C is twice as strong, From the perspective of Server C it becomes more difficult, to find out who the real culprit of the attack is: hacker.

Related Articles

What Does Pink Whitney Taste Like

What Are A Group Of Penguins Called

What Does Hung Jury Mean

What Happens If You Mix Premium And Regular Gas

What Color Does Green And Purple Make

What Does Po Mean In Baseball

Caring, Protective Shepherd