Ques 2
What is the difference between authentication and authorization? Provide an example for each.
To be able to access devices, particularly those connected on a network, we need to have authentication and authorization. These two processes are the basics of securing a device and network.
Authentication
Authentication in general, is the process of identifying the user who is using the particular device. It is meant to verify if the user pretending to use the device is actually the same. The user has a record in the database of the system and an exclusive piece of information that he solely has. For example, the piece of information can be a password, or any biometric attributes such as fingerprint or Iris scans.
When the checking is done
…show more content…
Attackers use every detail obtained in the two previous steps so as to own the system. Once attackers are in the system, they will need to gain extra level of access through privilege escalation until having full access and take entire control of the system.
Security managers need to make greater efforts at this stage to limit access to the attackers. The security managers or administrators need to detect the infiltrators and try to disarm control to avoid much damage from the attackers. One must look into logs and if any unauthorised external user is detected try to abort connection. Other measures such as encrypting sensitive information can be used when all trials fail.
Step 4 – Maintaining Access:
Once an attacker has access to the system or network, he or she will have to find a way to stay connected so as finish their job. The attacker will have to avoid detection by moving all around to find the key information.
With IDS and IPS devices, the detection of extrusions is also possible. The external security must be as robust as the internal so that information going out must be granted by administrators’ privilege or limited by volume. Monitoring logs for unusual activity as well is to be used.
Step 5 – Covering
The analysis will allow the NIDS to alert on activity which could be a sign of unauthorized access or malicious activity. The IT security team will check the alerts to determine if an event or incident has occurred. Similarly, an HIDS application will be installed on all servers and workstations. The HIDS application will analyze the servers and workstation and check the system logs to determine if any potential unauthorized or malicious activity has occurred and send the information to the NIDS for processing and alert creation.
To help resolve the issue it is highly critical to implement a trace route to see if all networks are intact and no network has been compromised. Next step would be to install anti-malware, anti-spyware as well as firewalls to help protect against the attacks. Other steps that could be implemented to protect against the attack would be to implement strong and lengthy passwords even consider encrypting the passwords since it correlates to sensitive data. Other safe practices that can be looked into is to have security access control measures where students and faculty have inside exposure of the website or in other words to be able to read/write and outsiders just have limited input.
IDS is a device or software application that monitors a network for an unauthorised attack.
Watch Guard Fireware has a firewall based IPS the can detect and block of attacks in the proxy policies. When enabling Firebox, this will protect the network from any kind of attack especially zero day threats from the outside world. Also, the IT staff should use a signature-based Intrusion prevention system to that is good for maintaining efficiency and performance protection on the network. Using my suggestions will prevent any more threats in the future for these web servers on the college’s
In 1980, James Anderson’s paper, Computer Security Threat Monitoring and Surveillance, bore the notion of intrusion detection. Through government funding and serious corporate interest allowed for intrusion detection systems(IDS) to develope into their current state. So what exactly is IDS? An IDS is used to detect malicious network traffic and computer usage through attack signatures. The IDS watches for attacks not only from incoming internet traffic but also for attacks that originate in the system. When a potential attack is detected the IDS logs the information and sends an alert to the console. How the alert is detected and handled at is dependent on the type of IDS in place. Through this paper we will discuss the different types of IDS and how they detect and handle the alerts, the difference between a passive and a reactive system and some general IDS intrusion invasion techniques.
This step is also known as two-factor authentication. It adds an additional layer of protection to the user’s password. It requires users to have extra credentials other than just a password to access an online account. Two-step verification normally requires users to know their password, and have a specific mobile device. Some social media have started introducing the two-step verification for example LinkedIn and twitter. Two-step verification reduces the chances of hackers bumping into your privacy as it critically make sure that only the authenticated user have access to it.
...work Security Article). With this given information in the essay, is a great start to learn how to keep your network secure. This is only a small part of the prevention of infiltration of your network and computer. If one desires to learn more, go above and beyond and continue to learn on how to keep your network secure.
It has been demonstrated that a number of interoperable systems must be implemented to fully protect a network; a strategy known as Defense in Depth. Due to the multitude of security devices and device categories available, it can be very difficult to identify the correct tools for meeting security goals. Using the Defense in Depth strategy will require an understanding of the interactions between devices occuring within the network.
This is the information age. There are financial and corporate information, research and analysis, trends have lead the trend and military intelligence. Information classified as confidential, sensitive and critical. There are gleaning information extraction and automated tools. There are management solutions, such as content management, knowledge management and document management, information management collected for. There are different mechanisms for storing information storage. Finally, information security, there are tools and techniques. In this paper, three important types of security information we need to discuss, such as security information from hackers, during transit to ensure that information and the protection of information stored in the system can be lost or stolen. Finally, a brief about wireless security has been described here. The Internet has become the information superhighway. Evolving Internet and related technologies have allowed companies to communicate in new ways with all types of people and strategic organization. Over the years, there have been increased after the distinctive features of Internet connection. As needs change, the more powerful the service of humanity encountered, faster connections, and what can be done in the need for more flexibility. Initially, the service, such as a simple POP3-based email and Web access is the extent of an Internet connection. Today, we have a site-to-site virtual private network (VPN), clients and home users VPN, streaming media, Web-based training, wonderful Internet applications, e-commerce, and business-to-business extranet. Therefore, the development of the Internet to meet the needs of a variety of advanced human society. On the home front, fr...
Cybersecurity standards have recently been implemented to force organizations to maintain a safe environment and reduce the risk of cyber-attacks. Cyberspace is the “universe” for computers, and depending on how secure one’s system is could determine how well someone could maneuver through cyberspace. Cybersecurity is designed to find these intruders in unwanted areas, by placing barriers and obstacles. Of course cyberspace is an undefined area so it’s possible for people to get around and intrude into other networks.
When someone suspects that an unauthorized, unacceptable, or unlawful event has occurred involving an organization’s computer networks or data-processing equipment Computer security incidents are normally identified. Initially, the incident may be reported by an ultimate user, detected by a system administrator, identified by IDS alerts, or discovered
This paper describes the basic threats to the network security and the basic issues of interest for designing a secure network. it describes the important aspects of network security. A secure network is one which is free of unauthorized entries and hackers
Authentication: The process of proving one's identity. (The primary forms of host-to-host authentication on the Internet today are name-based or address-based, both of which are notoriously weak.)
Implement a system Intrusion Detection/Prevention System (IDS/IPS): - Make the investment in an IDS/IPS to distinguish and prevent potential system dangers. sensors ought to be circulated all through the system, with a specific focus on general society untrusted section. Take alerts very seriously.
Rayne, PB, Kulkarni, P, Patil, S & Meshram, BB 2012, ‘Authentication and Authorization:Tool for Ecommerce Security’, Engineering Science and Technology: An International Journal, vol. 2, no. 1, pp. 150-157.