Entries Categorized as 'Network Security'

Safer Computing Online

Date September 28, 2008

Computer viruses threaten the user everyday. It gets more dangerous each day. One day they can tap into your personal information and steal your identity for criminal activities.
Tehre are free softwares that unleashes spyware, trojans, or worms on your system. So dont go trying them all out because its free. Others install popups which always annoys the users.

Arm your computer and protect yourself against these potential attecks by installing a good antivirus software. Using the firewall greatly reduces the risk of hackers crawling into your system.
Now adays, browsers are equipped with popup blockers, so you can enable this feature to ward of annoying popups while you view a certain page in your favorite site. Changing passwords regularly can be of good use. And dont forget to keep those passwords to yourself. Never indulge it to others, not even to your mother.

These are a few things that might protect you from becoming a victim.
Image Source:geeksontime

Youtube is not safe too.

Date August 19, 2008


Image source:www.youtubeic.com
Remember what your computer teachers or anyone good enough, told you not to tell your “secret words” (Meaning, not just your passwords) to anyone? Well, some hackers send malicious softwares or malwares to capture your keystrokes, copy your precious data, or even control your computer to hack another person. Okay, maybe you know about that too, and even the “hackers use websites for these purposes” thing. But! Did you know that Youtube is not that different from these sites? That’s right. Youtube has these links, and you might just open these things since these links looks trust worthy, and your “friend” sent this link. In short, Youtube is not different from Myspace now. Well, to save yourself from these hackers, just use the search engine in Youtube, or if the link is not in youtube, copy the link and paste it to yahoo or google, and their protection might show the true face of that page. But if you think that its such a hassle, then just don’t open it.

Types of Network/Internet Security Incidents

Date June 7, 2008

Probe : Unusual attempts to gain access or discover something about system.

Scan : Many probes done using an automated tool.

Account Compromise : Unauthorized use of a computer account by someone other than the account owner.

Root Compromise : Similar to an account compromise, except that the account that has been compromised has special privileges on the system.

Packet Sniffer : A program that captures data from information packets as they travel over the network.

Denial of Service : The goal of denial-of-service attacks is to prevent legitimate users of a service from using it.

Exploitation of Trust : Computers on networks often have trust relationships with one another. For example, before executing some commands, the computer checks a set of files that specify which other computers on the network are permitted to use those commands. If attackers can forge their identity, appearing to be using the trusted computer, they may be able to gain unauthorized access to other computers.

Malicious Code : Programs like viruses, worms and Trojan horses.

Internet Infrastructure Attacks : Rare attacks on network name servers, network access providers, and large archive sites.

Source

Stay Informed

Date April 30, 2008

There is a lot of risk over the internet, and this is compounded by the fact that it is changing constantly. If you subscribe to a few newsletters and bulletins or read blogs like this one, you would go a long way in being aware of the latest dangers. You could subscribe to Microsoft Security Bulletins for the earliest notification of the discovery and fixes available for instable programs. If you want to be alerted of live viruses, you could subscribe to the following: Symantec AntiVirus Research Centre Newsletter, Trend Virus Info, McAfee Dispatch and Sophos Email notification.

FBI Director to Monitor Internet Activity

Date April 17, 2008

The FBI called for new legislation that allows the federal police to keep close look at internet activity to track down illegal activities. This seem to go beyond a current plan to monitor traffic on federal-government networks, and that the bureau should have a broad “omnibus” authority to conduct monitoring and surveillance of private-sector networks as well. This could violate the Fourth Amendment’s guarantee of freedom from unreasonable searches and seizures. In general, courts have ruled that police need search warrants to obtain the content of communication

Source

Removing Spyware

Date April 15, 2008

Suspecting a spyware in your system? Here are some tips on how you could get rid of spyware in your computer:

1. Get, install and periodically run Ad-aware and Spybot Search & Destroy.
2. To prevent reinfection by Aureate/Radiate - search for advert.dll on your system. If it’s there and if you can, delete it (Ad-aware will do this for you). Then create an empty text file, name it advert.dll, make it read-only and save it in your Windows/System directory. Then configure Ad-aware (version 5 or later) to ignore advert.dll.

Beware of Spyware

Date April 10, 2008

A spyware is computer software that is classified as privacy-invasive. This is installed covertly on a personal computer. Once installed, it can monitor the user’s behavior, collect personal information like surfing habits and sites that visited. It can interfere with user control of the computer such as installing additional software, redirecting Web browser activity, accessing websites blindly that will cause more harmful viruses, or diverting advertising revenue to a third party. It can change computer settings, resulting in slow connection speeds, different home pages, and loss of Internet or other programs.

What is an IDS?

Date April 8, 2008

An IDS or Intrusion Detection System is a system that detects the misuse of network or computer resources. It uses a number of sensors to detect intrusions. Some of these may be the following: a sensor to monitor TCP connection requests, log file monitors, or file integrity checkers.

The IDS system collects data from its sensors and analyzes this data to alert the administrator if there is malicious activity on the network. It is commonly divided into NIDS (Network Intrusion Detection Systems) and HIDS (Host Intrusion Detection Systems). Newer NIDS also attempt to act as NIPS (Network Intrusion Prevention Systems). An example of an excellent open source Network Intrusion Detection System is SNORT

Accounting (The AAA Protocol Part 3)

Date April 4, 2008

Accounting refers to the tracking of the consumption of network resources by users. This information may be used for management, planning, billing, or other purposes. Real-time accounting refers to accounting information that is delivered concurrently with the consumption of the resources. Batch accounting refers to accounting information that is saved until it is delivered at a later time. Typical information that is gathered in accounting is the identity of the user, the nature of the service delivered.

Authorization (The AAA Protocol Part 2)

Date April 3, 2008

Authorization is the granting of specific types of privileges or barring privileges to an device or a user based on their previous authentication, what privileges they are requesting, and the current system state. This may be based on restrictions, for example time-of-day restrictions, or physical location restrictions, or restrictions against multiple logins by the same user. Most of the time the granting of a privilege constitutes the ability to use a certain type of service. Examples of types of service include, but are not limited to: IP address filtering, address assignment, route assignment, QoS/differential services, bandwidth control/traffic management, compulsory tunneling to a specific endpoint, and encryption.