The New DoS Attack
comparative Essay
1148 words
This essay will define a “denial of service” (DOS) attack and explain the steps involved in an attack. The new type of DOS attack using phone lines will be the focus of the research provided in this essay. Denial of service attacks can affect both business and financial operations of an individual or a business. The impact of the attack both on financial and business operations will be outlined. The measures a person or business can put into place in order to avoid these attacks will be discussed. If a business or individual is still subject to an attack certain actions can help to minimize the losses caused by the intrusion. Actions to take in the event an attack is not avoided will be suggested.
A “denial of service” attack or DoS attack targets a computer and a network and attempts to prevent a user from accessing information. The victim of the attack may not be able to access bank information, email, or other services. The term “denial of service” is the name of the attack because the attacker floods the server with requests which then “denies” the legitimate user access to the server because the server can only handle a certain amount of requests. (McDowell, 2009). A DoS attack can affect an email account by maximizing the number of emails an account can receive, therefore, denying legitimate emails from being sent to the account. The DoS attack can go a step further and distribute the attack (DDoS) from the victim’s computer onto other networks or computers. The attack takes advantage of the weaknesses of network and sends a surge of information by using more than one computer at the same time. (McDowell, 2009).
New DoS Attack
In 2010 a new type of DoS attack emerged attacking phone lines. The concept...
... middle of paper ...
...2010. Web. 04 Apr. 2011. .
FBI.gov. "Phone Scam Targets Your Bank Account." FBI. 21 June 2010. Web. 04 Apr. 2011. .
McDowell, Mandi. "Understanding Denial-of-Service Attack." US-CERT. 04 Nov. 2009. Web. 04 Apr. 2011. .
NeverFear.org. "Performing a Denial of Service (DoS) Attack on a Phone Line."NEVERFEAR.org. 20 Nov. 2009. Web. 04 Apr. 2011. .
Schwartz, Matthew J. "Denial Of Service Attacks Increased Sharply In 2010." Information Week. 16 Mar. 2011. Web. 04 Apr. 2011. .
In this essay, the author
- Defines a "denial of service" attack and explains the steps involved in an attack. the impact of the attack on financial and business operations will be outlined.
- Explains that a new type of dos attack emerged in 2010 attacking phone lines. the attack is consciously planned by the criminal by obtaining sensitive information from the victim.
- Explains that small to mid-size businesses are the focus of telephone dos attacks, and that the first step in avoiding being a victim of an attack is understanding the impact of the attack.
- Defines a "denial of service" attack and explains the steps involved in an attack. the impact of the attack on financial and business operations will be outlined.
- Explains that a new type of dos attack emerged in 2010 attacking phone lines. the attack is consciously planned by the criminal by obtaining sensitive information from the victim.
- Explains that small to mid-size businesses are the focus of telephone dos attacks, and that the first step in avoiding being a victim of an attack is understanding the impact of the attack.
- Advises businesses and individuals to monitor bank account balances, change log in information periodically, and never give personal information to unsolicited callers.
- Cites deutsch, william, and fbi.gov's "phone scam targets your bank account."
- Explains neverfear.org's "performing a denial of service (dos) attack on a phone line." schwartz, matthew j. "denial of service attacks increased sharply in 2010.
Harness the Power of AI to Boost Your Grades!
Haven't found what you were looking for? Talk to me, I can help!
Related
- analytical
- opinion
- comparative
- explanatory
- Curbing Cyberterrorismanalytical essayIn the contemporary world computers and networks play an important role in everyday life. Retail stores use them to process non-cash transactions, government entities use them to store data about citizens, and financial institutions use them to record and process transactions, but these are only a few examples of the many organizations that rely on networked computers. For these systems to be effective, they must be reasonably secure from breaches and attacks, such as cyberterrorism. According to William L. Tafoya, cyberterrorism is defined as “the intimidation of civilian enterprise through the use of high technology to bring about political, religious, or ideological aims, actions that result in disabling or deleting critical infrastructure data or information” (2011). The importance of such networked systems and their value as cyberterrorism targets, means that organizations must have adequate policies in place to decrease the likelihood of such attacks.
In this essay, the author
- Explains that computers and networks play an important role in everyday life, and that organizations must have adequate policies in place to decrease the likelihood of such attacks.
- Explains that cyberterrorism can originate from a variety of sources, including hackers, political or religious zealots, and disgruntled employees.
- Opines that cyberterrorism is a rapidly evolving threat in the contemporary world, and that organizations that are better prepared for an attack will be better able to respond efficiently and effectively.
- Explains that computers and networks play an important role in everyday life, and that organizations must have adequate policies in place to decrease the likelihood of such attacks.
- Explains that cyberterrorism can originate from a variety of sources, including hackers, political or religious zealots, and disgruntled employees.
- Opines that cyberterrorism is a rapidly evolving threat in the contemporary world, and that organizations that are better prepared for an attack will be better able to respond efficiently and effectively.
- Cites dang, s. (2011). the prevention of cyberterrorism and cyberwar.
- Argues that employee education and monitoring are the most effective components of a policy to mitigate and prevent cyberterrorism.
742 wordsRead More - Federal Restrictions on the Internetopinion essayBRANDON, JOHN. "When Cybercriminals ATTACK." Computerworld 45.21 (2011): 26. MasterFILE Premier. Web. 6 Feb. 2014
In this essay, the author
- Explains that pedophiles don't have to kidnap kids anymore. they can just get on a social media website and gain the trust of children.
- Opines that cybercriminals, internet pedophiles, and cyberbullying should be stricter federal restrictions for content on the internet.
- Opines that cyber bullying is one of the hardest forms of bullying to punish.
- Explains that pedophiles don't have to kidnap kids anymore. they can just get on a social media website and gain the trust of children.
- Opines that cybercriminals, internet pedophiles, and cyberbullying should be stricter federal restrictions for content on the internet.
- Opines that cyber bullying is one of the hardest forms of bullying to punish.
- Analyzes how gonzales, alberto r., and lindfors, pirjo, riittakerttu kaltiala-heino and arja h. rimpelä, "internet sexual predators are a serious problem."
586 wordsRead More - Nt1310 Unit 3 Network Attackcomparative essayThe attack/threat on the Sony PlayStation network was a DDoS (Distributed Denial of Service) as it caused the servers to go down,
In this essay, the author
- Explains that the report will discuss the current network attacks/threats that have happened since 2013. the sony playstation network attack and ashley madison attack will also be discussed.
- Explains that the attack on sony's playstation network was a ddos (distributed denial of service). the lizard squad took down the psn in december and again in august of 2014.
- Explains that lizard squad and anonymous were responsible for the attacks in december and august. they could be arrested by the fbi for trying to take down a big networking company.
- Explains that the report will discuss the current network attacks/threats that have happened since 2013. the sony playstation network attack and ashley madison attack will also be discussed.
- Explains that the attack on sony's playstation network was a ddos (distributed denial of service). the lizard squad took down the psn in december and again in august of 2014.
- Explains that lizard squad and anonymous were responsible for the attacks in december and august. they could be arrested by the fbi for trying to take down a big networking company.
- Explains that the ashley madison attack was a backdoor because the impact team could have used this door to gain access to the databases. the website's promise to delete data about their customers was wrong.
- Explains that the impact team was responsible for the attack, but no one knows the exact identity of the hacker/hackers who took this information.
- Compares the 2011 psn attack with the ashley madison attack in that both websites had their customer's personal information taken by the hackers/attackers. the impact group used a back door while the lizard squad only ddosed.
1019 wordsRead More - Internet Addiction or Pathological Internet Usageanalytical essaySchuman, Evan. "It's Official Net Abusers Are Pathological." Tech Web. 13 August, 1997. (5 March, 2001).
In this essay, the author
- Opines that internet addiction is in a league of it's own. researchers are struggling to classify the disorder.
- Explains that an addicted internet user spends an average of 38 hours per week online dealing with nonemployment nonacademic efforts, compared with "non addicts" in the survey who averaged eight hours.
- Explains that internet addiction is difficult to treat because the internet itself is not a bad thing until it is misused. ivan goldberg, md, coined the term "internet addiction disorder."
- Opines that internet addiction is in a league of it's own. researchers are struggling to classify the disorder.
- Explains that an addicted internet user spends an average of 38 hours per week online dealing with nonemployment nonacademic efforts, compared with "non addicts" in the survey who averaged eight hours.
- Explains that internet addiction is difficult to treat because the internet itself is not a bad thing until it is misused. ivan goldberg, md, coined the term "internet addiction disorder."
- Explains that internet addiction is an impulse control disorder that starts when one loses interest in real world and seeks solace in the computer. instead of hiding from problems and procrastinating one must solve it.
- Explains that pathological internet use or internet addiction is a type of impulse control disorder and is often compared to alcoholism.
- Explains that internet addiction is often based on loneliness and feelings of inadequacy.
- Explains that the internet is a socially connecting device that's social isolating at the same time.
- Explains caragata, warren, and clark, charles s. "crime in cybercity." maclean's 22 may, 1995.
- Analyzes holliday, heather, mccormick, brian, schuman, evan, stoll, clifford, and wilson, tim.
977 wordsRead More - Authorize Case Studyexplanatory essayIn September 2004, Authorize.Net's servers were knock by a Distributed Denial of Service (DDoS) show aggression. The DDoS show aggression/attack lasted for more one week and reason a virtual shut down of the payment gateway's service. The aggressor/attacker insisted money from Authorize.net in replace for ended the attack.
In this essay, the author
- Describes authorize.net as a payment gateway examine/service supplier allowing merchants to accept credit card and electronic check payments through their web site and in excess of an ip connection/link.
- Explains how authorize.net's servers were knocked by a distributed denial of service (ddos) show aggression. the aggressor/attacker insisted money from authorized.net in replace for ended the attack.
- Explains that authorize.net's web communications went offline on july 2, 2009 and stayed down the entire morning of july 3, 2009.
- Describes authorize.net as a payment gateway examine/service supplier allowing merchants to accept credit card and electronic check payments through their web site and in excess of an ip connection/link.
- Explains how authorize.net's servers were knocked by a distributed denial of service (ddos) show aggression. the aggressor/attacker insisted money from authorized.net in replace for ended the attack.
- Explains that authorize.net's web communications went offline on july 2, 2009 and stayed down the entire morning of july 3, 2009.
- Explains that authorize.net started a twitter description that morning, but didn't modernize their phones until july 5 when they reopened telephones.
206 wordsRead More - Business Intelligence Planexplanatory essayWeiss, A. (2013). A Denial of Service attack can disrupt your organization's web site and
In this essay, the author
- Explains that few outsourcing contracts go beyond the fundamental business terms and conditions, and less focus on data-fusion requisites, let alone the requirement to thrust business intelligence to stakeholders.
- Explains that in a ddos attack, the inward bound traffic flooding the victim originates from different sources, making it difficult to distinguish legitimate user traffic from attack traffic when spread across multiple sources.
- Explains that the third most significant threat is deficient password management. insider sabotage is the threat that trusted individuals have pilfered sensitive information or intellectual assets from their employer.
- Explains that few outsourcing contracts go beyond the fundamental business terms and conditions, and less focus on data-fusion requisites, let alone the requirement to thrust business intelligence to stakeholders.
- Explains that in a ddos attack, the inward bound traffic flooding the victim originates from different sources, making it difficult to distinguish legitimate user traffic from attack traffic when spread across multiple sources.
- Explains that the third most significant threat is deficient password management. insider sabotage is the threat that trusted individuals have pilfered sensitive information or intellectual assets from their employer.
- Explains that traffic analysis is more complex and difficult to detect. active network security attacks are in the form of modifying the stream of data or creating a bogus stream.
- Introduces f-secure, a quick introduction to botnets, how they work, and what they are.
- Explains k9. (n.d.). what do you want to protect?
- Describes moore, a. p., cappelli, and trzeciak, the big picture of insider it sabotage.
- Describes tsai, leu, liu j, lin s, & shaw, m. j. a mcdm approach for sourcing.
- Describes vivek, s. d., richey, r. g. & dalela, v. a longitudinal examination of partnership.
- Opines that a denial of service attack can disrupt your organization's web site.
- Explains the objective of the business intelligence (bi) plan to encourage outsourcing and offshoring information security pursuits.
- Explains that companies seek cost savings and operational efficiencies with their current business processes by engaging service providers domestically or internationally.
- Analyzes the rising trend in it outsourcing where increased offshoring and/or outsourcing of services operations has altered it service customs from internal command and control of it assets to it services as a utility.
- Explains that the foremost is threats confronted by organizations are ddos attacks, botnets, password administration, insider sabotage, and the internet.
1594 wordsRead More - Essay On Bp Hijackingexplanatory essayadvertised [2]. With this, an attacker can cause serious outages including a complete loss of
In this essay, the author
- Explains that the internet is extremely vulnerable to attacks of various sorts. bgp hijacking can be very dangerous as the effect stays on for several months.
- Explains that bgp hijacking defenses are good enough to mitigate the issue, but they have two main loopholes: they require significant modifications to the routing protocol, making adoption challenging, and there are limited benefits of partial adoption.
- Explains that bgp hijacking is one of the most common forms of threat to the world of internet today.
- Explains that the internet is extremely vulnerable to attacks of various sorts. bgp hijacking can be very dangerous as the effect stays on for several months.
- Explains that bgp hijacking defenses are good enough to mitigate the issue, but they have two main loopholes: they require significant modifications to the routing protocol, making adoption challenging, and there are limited benefits of partial adoption.
- Explains that bgp hijacking is one of the most common forms of threat to the world of internet today.
- Explains that there have been many cases of bgp hijacking in the past. in 2008, at least eight us universities had their traffic diverted to indonesia for about 90 minutes.
- Explains the famous bgp hijacking case of 2008: youtube announced only the /22; pakistan telecom announced the 24th.
- Explains that there is still no effective prevention and mitigation solution against such routing attacks. the study on defenses against bgp hijacking has focused on detection alone, not considering automated rsponses.
- Explains that there are four main steps to be taken to reach a solution against bgp hijacking: preparation & detection, investigation and mitigation or prevention, and clean up.
- Explains that before investigating any kind of hijacking issue, we need to make sure that we are able to detect the problem. proper detection also requires proper preparation in advance.
- Explains the difference between prefix and sub-prefix hijacking to understand the technique of detection.
878 wordsRead More - An Increasing Need for Security Networkexplanatory essayWe used to live in a society where everything was on paper, from employment applications to record history to flight itineraries, going from that to today where everything is on the internet. We, as a country, rely on technology for survival, from grocery orders to emails, office functions, shopping and everyday life functions. With these changes, companies have to be computer literate in order to function and do so well to maintain a competitive advantage, and function like other businesses (Brumfield, 2014). Today, technology systems are essential for survival, a simple denial of service could cause a company millions of revenue depending on the demand from their customer base.
In this essay, the author
- Explains the importance of passwords in protecting the confidentiality, credibility, and trustworthiness of an establishment.
- Explains that the harder your password, the more secure your system. strong passwords buy you time and make it almost impossible for a system to be broken into.
- Explains that if your operating system was stolen, it makes it hard or almost impossible for the person to view your confidential information.
- Explains the importance of passwords in protecting the confidentiality, credibility, and trustworthiness of an establishment.
- Explains that the harder your password, the more secure your system. strong passwords buy you time and make it almost impossible for a system to be broken into.
- Explains that if your operating system was stolen, it makes it hard or almost impossible for the person to view your confidential information.
- Opines that people make mistakes that weaken password protection. the wrong person having your password could pose as you, do terrible things, edit or delete files and cause you your job.
- Explains that passwords can be easily forgotten, which could create more work for the i.t security department. multiple users could slow down productivity.
- Explains that columbia university medical center (cumc). operating system and software updates. retrieved from http://cumc.columbia.edu/it/getting_started/updates.html.
- Explains what is the difference between a software upgrade and an update.
- Cites innella, p., managing intrusion detection systems in large organizations, part one.
- Explains werlinger, hawkey, muldner, jaferian, and beznosov, the challenges of using an intrusion detection system.
- Explains the definition of an operating system, which is software that interacts with hardware, enabling it to run programs needed.
- Explains that password protection is a security measure that restricts viewing of outsiders and allows only cleared individuals to access the system. passwords make it impossible for people to gain access to work environments.
- Explains that authentication serves as an identifier to let the system know that the user is attempting to gain access. it also has its faults and disadvantages.
- Explains that weak passwords can be easily guessed and broken into. employees should be properly trained on password usage.
- Explains that passwords can be easily created and used. if proper password guidelines are set and followed by users, it would make it easy to implement it.
1545 wordsRead More - Computer Sabotage: Made Possible by Human Erroropinion essaySinton, Peter. “10 Steps to Prevent Internet Sabotage”. SFGate. 15 Mar. 2000. Web. 16 Apr. 2014.
In this essay, the author
- Explains that there is always room for error, whether it be in the code that provides functionality to a system or from the tasks and operations given to the system by the user.
- Explains that computer sabotage is important to determine key areas that might be improved, such as the crypto locker virus, which takes a user's entire system ransom until money has been paid.
- Recommends improving training practices and security protocols in order to avoid future malicious attacks. the crypto locker virus could have been avoided by not clicking the link.
- Explains that there is always room for error, whether it be in the code that provides functionality to a system or from the tasks and operations given to the system by the user.
- Explains that computer sabotage is important to determine key areas that might be improved, such as the crypto locker virus, which takes a user's entire system ransom until money has been paid.
- Recommends improving training practices and security protocols in order to avoid future malicious attacks. the crypto locker virus could have been avoided by not clicking the link.
- Opines that the kaiser data breach did nothing to defend against the malicious software on the computer because the infiltration of the system was not welcomed by actively opening a file.
- Opines that it is imperative that those responsible for updating security measures do so in a manner which is effective against all forms of attack.
- Opines that 'heartbleed' computer vulnerability is causing major security headaches. associated press. tulsa world.
- Opines that 'heartbleed' computer bug threat spreads to firewalls and beyond.
- Explains that giacomazzo, bernadette r., "openssl heartbleed computer virus fix and security: how to protect yourself from the latest internet bug".
- Opines that computer virus at heart of kaiser data breach.
- Opines that dowling, blake, "biz tech: be on guard against latest computer virus".
- Describes parasoft ceo's advice on how to avoid computer sabotage.
- Explains sinton, peter, "10 steps to prevent internet sabotage". sfgate.
969 wordsRead More - Catastrophic Telecommunications Cyber Attacks Are Impossibleanalytical essayProgram on Telecommunications and Cybersecurity Policy. (n.d.). The Global Information Society Project Program for Telecommunications Policy. Retrieved November 11, 2013, from http://www.telecom-program.org/
In this essay, the author
- Argues that it is difficult to accept the proposition that a threat to the telecommunications grid, both wired and wireless, in the united states could potentially be subject to cyber attacks.
- Analyzes how former senior u.s. officials simulated a catastrophic cyber attack, which overwhelmed wireless networks, disabled wired network communications, curtailed electrical supply channels, and oil and gas pipelines. congress has yet to take up the issue of granting executive authority.
- Analyzes how telecommunications is evolving rapidly, and how ultra-wide band, software-defined radio and mesh networks challenge the way in which it is regulated in this country.
- Argues that it is difficult to accept the proposition that a threat to the telecommunications grid, both wired and wireless, in the united states could potentially be subject to cyber attacks.
- Analyzes how former senior u.s. officials simulated a catastrophic cyber attack, which overwhelmed wireless networks, disabled wired network communications, curtailed electrical supply channels, and oil and gas pipelines. congress has yet to take up the issue of granting executive authority.
- Analyzes how telecommunications is evolving rapidly, and how ultra-wide band, software-defined radio and mesh networks challenge the way in which it is regulated in this country.
- Analyzes the effects of a catastrophic event to our telecommunication systems on the nation. the low-grade cyber attack could disrupt voice mail, route calls incorrectly, or inject worms into the system.
- Explains that while low-level telecommunications service interruptions are plausible, a catastrophic cyber event that fundamentally destroys parts of our networks is impossible.
- Opines that multiple sustained attacks on critical infrastructure is not feasible for hackers, terrorist groups or nation states, where the risk of discovery of what would be seen as an act of war outweighs any advantage gained from cyber attacks.
- Opines that cyber attacks on a scale that would disrupt large portions of our national telecommunications are not feasible now, or in the foreseeable future.
- Cites corbin, k., dalgaard-nielsen, a. (2006), transatlantic homeland security protecting society in the age of catastrophic terrorism.
- Explains the global information society project program for telecommunications policy.
878 wordsRead More - SIP Securityexplanatory essayThe session initiation protocol (SIP) is emerging as standard protocol for session control in Next generation voice over internet protocol (VoIP) As it is based on IP it is vulnerable to all IP related threats . Among all the attacks, flood-based denial of service DoS attack is one of the main threats to SIP. Several solutions regarding prevention of DoS are discussed. Efficient Security scheme is proposed for batter performance.
In this essay, the author
- Explains that the session initiation protocol (sip) is emerging as standard protocol for session control in next generation voice over internet protocol (voip).
- Explains that sip proxy server will process the saved requests. processes involve authenticating or destination address lookups. if huge amount of sip request are flooded, exhaustion of processing resource could be made resulting in a dos attack.
- Explains that attackers can issue counterfeit bye or cancel messages to sip proxy for tearing down sessions.
- Explains that the session initiation protocol (sip) is emerging as standard protocol for session control in next generation voice over internet protocol (voip).
- Explains that sip proxy server will process the saved requests. processes involve authenticating or destination address lookups. if huge amount of sip request are flooded, exhaustion of processing resource could be made resulting in a dos attack.
- Explains that attackers can issue counterfeit bye or cancel messages to sip proxy for tearing down sessions.
- Explains that voice over ip traffic is sent on the ip network without any encryption. sniffing is possible, especially in wireless networks, where it is easier to trap the data.
- Explains that this is an attack against availability and confidentiality. attackers can issue malicious invite messages to the sip proxy for redirecting all conversation messages.
- Explains that service theft is one of the most common forms of fraud or hacking in pstn environment.
- Explains that their proposed model is based on ip history and high priority queuing of frequent callers.
- Explains that they have used the opnet modeler 14.5 for simulating their model, which gives a wide range of parameters, including umts, ipv6 and advanced ngn attributes.
- Explains that the 3rd generation partnership program (3gpp) has chosen sip as a signaling protocol in ip multimedia subsystem (ims).
- Explains that the text-based nature of sip messages gives more opportunities for attacks like spoofing, hijacking and message tampering.
- Explains that received sip requests must be copied in the proxy’s internal buffer to be processed, and these messages will be kept until the last ack message is sent to terminate the call setup handshake.
- Explains that denial of service dos is a severe issue for any ip network-based service. it can take various forms, but generally involves an attack that prevents users from effectively using targeted services.
- States that commercial firewalls can be defeated with advanced attack tools. firewalls are the most common sip flooding mitigation technique.
- Explains how the dadp scheme is proposed to improve the performance of voip by giving the invite message lower priority.
- Explains that when a sip request comes in, the firewall authenticates the source by using improved predictive nonce checking.
- Explains the overall fire wall process. incoming traffic is first checked in block list. if any packet is coming from bad ip address, it will be blocked at once.
- Explains that the proposed model deals with the dos attack by considering ip-history and priority list. limiting privileges and installing anomaly detection software can detect such attacks.
2500 wordsRead More