ECS 6200 NEC Week 3 Rootkits Authentication and Access and Hacking Discussion Question-1 : Describe in your own words what a rootkit is, And it’s must be b

ECS 6200 NEC Week 3 Rootkits Authentication and Access and Hacking Discussion Question-1 : Describe in your own words what a rootkit is, And it’s must be between 250-300 words

Reference : AttacHED PPT

Question-2 : Tech companies prepare for cyberattacks using common cybersecurity resources. Select one of the resources listed and explain how you could implement that particular policy to prevent an attack: 1. monitoring and assessment, 2. policies and controls, 3. hiring, 4. software, 5. firewalls, 6. authentication and access, 7. encryption. (200-250 words)

Reference :1. https://www.tutorialspoint.com/ethical_hacking/ethical_hacking_terminologies.htm

2. https://www.tutorialspoint.com/ethical_hacking/ethical_hacking_skills.htm

Question-3 : Search the Internet and locate an article that relates to the topic of HACKING and summarize the reading in your own words. Your summary should be 2-3 paragraphs in length and uploaded as a TEXT DOCUMENT. Click the link above to submit your work. There is an EXAMPLE attached to show you the format requirements.

Reference :1. https://www.youtube.com/watch?v=t2mRNxfHTjw&feature=youtu.be

2. Attached ppt Week3_Ethical hacking Fundamentals of Information
Systems Security
Lesson 3
Malicious Attacks, Threats, and
Vulnerabilities
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Learning Objective(s)
▪ Describe how malicious attacks, threats,
and vulnerabilities impact an IT
infrastructure.
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 2
Key Concepts
▪ Malicious software and countermeasures
▪ Common attacks and countermeasures
▪ Social engineering and how to reduce risks
▪ Threats and types of attacks on wireless
networks
▪ Threats and types of attacks on web
applications
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 3
Malicious Activity on the Rise
▪ Examples of the malicious attacks are
everywhere
▪ Data breaches occur in both public and private
sectors
▪ In 2013, China was top country of origin for
cyberattacks, at 41 percent
▪ United States was second at 10 percent
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 4
What Are You Trying to Protect?
Customer data
IT and network infrastructure
Intellectual property
Finances and financial data
Service availability and productivity
Reputation
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 5
What Are You Trying to Protect?
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 6
Whom Are You Trying to Catch?
Blackhat
Crackers
Hackers
Grayhat
Fundamentals of Information Systems Security
White
-hat
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 7
Attack Tools
▪ Protocol analyzers (sniffers)
▪ Port scanners
▪ OS fingerprint scanners
▪ Vulnerability scanners
▪ Exploit software
▪ Wardialers
▪ Password crackers
▪ Keystroke loggers
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 8
What Is a Security Breach?
▪ Any event that results in a violation of any
of the C-I-A security tenets
▪ Some security breaches disrupt system
services on purpose
▪ Some are accidental and may result from
hardware or software failures
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 9
Activities that Cause Security
Breaches
Denial of service (DoS) attacks
Distributed denial of service (DDoS) attacks
Unacceptable web-browsing behavior
Wiretapping
Use of a backdoor to access resources
Accidental data modifications
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 10
Denial of Service Attack
▪ A coordinated attempt to deny service by occupying a
computer to perform large amounts of unnecessary tasks
• Logic attacks
• Flooding attacks
▪ Protect using
• Intrusion prevention system (IPS)
• Intrusion detection system (IDS)
▪ Attacks launched using
• SYN flood
• Smurfing
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 11
Distributed Denial of Service Attack
Overloads computers
and prevents
legitimate users from
gaining access
More difficult to stop than a DoS
attack because DDoS originates
from different sources
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 12
Unacceptable Web Browsing
▪ Define acceptable web browsing in an
acceptable use policy (AUP)
▪ Unacceptable use can include:
• Unauthorized users searching files or
storage directories
• Users visiting prohibited websites
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 13
Wiretapping
Active
• Between-the-lines
wiretapping
• Piggyback-entry
wiretapping
Fundamentals of Information Systems Security
Passive
• Also called sniffing
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 14
Backdoors
▪ Hidden access included by developers
▪ Attackers can use them to gain access
Data Modifications
Data that is:
▪ Purposely or accidentally modified
▪ Incomplete
▪ Truncated
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 15
Additional Security Challenges
Spam
and spim
Cookies
Fundamentals of Information Systems Security
Hoaxes
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 16
Risks, Threats, Vulnerabilities
Risk
Probability that something bad is going to
happen to an asset
Threat
Any action that can damage or compromise an
asset
Vulnerability
An inherent weakness that may enable threats
to harm system or networks
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 17
Most Common Threats
Malicious software
Hardware or software failure
Internal attacker
Equipment theft
External attacker
Natural disaster
Industrial espionage
Terrorism
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 18
Threat Types
Disclosure
threats
• Sabotage
• Espionage
Alteration
threats
• Unauthorized changes
Denial or
destruction
threats
Fundamentals of Information Systems Security
• DoS attack
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 19
What Is a Malicious Attack?
Fabrications
Four
categories of
attacks
Interceptions
Interruptions
Modifications
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 20
Types of Active Threats
▪ Birthday attacks
▪ Brute-force
password attacks
▪ Dictionary password
attacks
▪ IP address spoofing
▪ Hijacking
▪ Replay attacks
Fundamentals of Information Systems Security
▪ Man-in-the-middle
attacks
▪ Masquerading
▪ Social engineering
▪ Phishing
▪ Phreaking
▪ Pharming
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 21
What Is Malicious Software?
Software that:
Causes damage
Escalates security privileges
Divulges private data
Modifies or deletes data
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 22
Virus
▪ Attaches itself to or copies itself into another program
on a computer
▪ Tricks the computer into following instructions not
intended by the original program developer
▪ Infects a host program and may cause that host
program to replicate itself to other computers
▪ User who runs infected program authenticates the
virus
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 23
Worm
▪ A self-contained program that replicates
and sends copies of itself to other
computers without user input or action
▪ Does not need a host program to infect
▪ Is a standalone program
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 24
Trojan Horse
▪ Malware that masquerades as a useful
program
▪ Trojans can:
• Hide programs that collect sensitive
information
• Open backdoors into computers
• Actively upload and download files
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 25
Rootkit
Modifies or replaces one or more existing programs to
hide traces of attacks
Many different types of rootkits
Conceals its existence once installed
Is difficult to detect and remove
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 26
Spyware
Type of malware that specifically threatens the
confidentiality of information
•
•
•
•
•
•
Monitors keystrokes
Scans files on the hard drive
Snoops other applications
Installs other spyware programs
Reads cookies
Changes default homepage on the web browser
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 27
What Are Common Types of
Attacks?
Attacks
on
availability
Attacks
on IT
assets
Attacks
on people
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 28
Social Engineering Attacks
Authority
Dumpster diving
Hoax
Impersonation
Shoulder surfing
Vishing
Whaling
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 29
Wireless Network Attacks
Bluejacking
Evil twin
IV attack
Packing sniffing
Replay attacks
War chalking
War driving
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 30
Web Application Attacks
Buffer overflow
Client-side attack
Header manipulation
Lightweight Directory Access Protocol (LDAP) injection
Malicious add-ons
SQL injection
XML injection
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 31
What Is a Countermeasure?
Countermeasures
• Detect vulnerabilities
• Prevent attacks
• Respond to the effects of successful attacks
Get help from
•
•
•
•
Law enforcement agencies
Forensic experts
Security consultants
Security incident response teams (SIRTs)
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 32
Countering Malware
▪ Create a user education program
▪ Post regular bulletins about malware problems
▪ Never transfer files from an unknown or untrusted
source (unless anti-malware is installed)
▪ Test new programs or open suspect files on a
quarantine computer
▪ Install anti-malware software, make sure it remains
current, and schedule regular malware scans
▪ Use a secure logon and authentication process
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 33
Countering Malware (cont.)
▪ Stay abreast of developments in malware
• National Cyber Security Alliance (NCSA)
www.staysafeonline.org
• United States Computer Emergency
Readiness Team (US-CERT)
http://us-cert.gov
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 34
Protecting Your System with
Firewalls
Firewall
Program or
dedicated
hardware
device
Fundamentals of Information Systems Security
Inspects
network traffic
passing
through it
Denies or
permits traffic
based on a set
of rules
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 35
Summary
▪ Malicious software and countermeasures
▪ Common attacks and countermeasures
▪ Social engineering and how to reduce
risks
▪ Threats and types of attacks on wireless
networks
▪ Threats and types of attacks on web
applications
Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 36
Sample Article Summary Assignment #1
Prepared by: Dr. Cindi Nadelman
Date: May 26. 2018
ECS 6200 – Managing Information Security
Article Title: Could a Cyber Attack Knock Out Your Computer?
Reference: https://www.lifewire.com/cyber-attacks-4147067
Cyber-attacks disguise themselves in a variety of ways ranging from email messages
that appear to be sent from a person in your contacts list, to malicious files sent as
attachments from a familiar source such as your bank or other businesses you frequent.
Understanding what not to do may be just as important as what to do when these
events occur.
In the event of a successful cyber-attack, the attacker may demand some form of ransom
payment to regain access to your files that have either been compromised or stolen.
Releasing control is usually requested in the form of cryptocurrency which is much
more difficult to track.
Downloading apps from unknown developers, opening files from random email
sources, visiting infected web sites, or clicking on links that are unfamiliar to you may
all be ways you are lured in and cause you to be more vulnerable to attacks.
The best way to protect yourself is to be keenly aware as you search the web or read
through your email messages. Training yourself to spot a potential attack is your best
defense and the the best way to protect yourself from cyber-attacks.

Purchase answer to see full
attachment