CyberSecurity - ITperfection - Network Security

Basics of Network Security

Tech20202020-08-14T07:15:24+00:00Categories: Network Security|Tags: Anti-malware, cisco, CISSP-Course, Cyber Attacks, cyber crime, cyber security, CyberSecurity, E-mail Encryption, e-mail security, Encryption, endpoint security, Firewall, IDS, intrusion prevention systems, IPS, Malware, mobile security, Network Attacks, Network Monitoring, Network Security, Penetration Testing, web security, wireless security|

It is essential for all organizations to protect their networks. With hackers increasing and becoming smarter day by day, the need to utilize network security tool becomes more and more impotent. Network security is any activity designed to protect the usability and integrity of network and data. In fact, network security is a term used [...]

Brute Force Attack

Tech20202020-08-14T07:31:06+00:00Categories: Network Security|Tags: Authentication, Brute Force Attack, Captcha, Credential Stuffing, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Dictionary attack, Dictionary attacks, Encryption, Hybrid brute force attacks, MFA, Multi-Factor Authentication, Network Attacks, Network Security, password complexity, password length, Password Manager, Rainbow table attacks, Salt the hash, Simple brute force attacks, Throttle rate|

A brute force attack (exhaustive search) is a cryptographic hack that relies on guessing possible combinations of a targeted password until the correct password is discovered. This attack uses trial-and-error to guess login info, encryption keys, or find a hidden web page. Brute force attacks don’t employ an intellectual strategy. These attacks simply try using [...]

Buffer Overflow Attack

Tech20202020-07-25T12:58:52+00:00Categories: Network Security|Tags: Address space randomization, ASLR, Buffer Overflow, Buffer Overflow Attack, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Data execution prevention, high-level programming languages, Integer overflow attack, Network Attacks, Network Security, security patches, SEHOP, Structured exception handler overwrite protection, Unicode overflow|

Buffers are memory storage regions that temporarily hold data while it is being transferred from one location to another. These buffers typically live in RAM memory. Most modern hard drives take advantage of buffering to efficiently access data. Buffer is also widely used in online video streaming and buffers are frequently used in online video [...]

Dark Web

Tech20202020-09-02T05:29:51+00:00Categories: Computer & Network Concepts|Tags: Bitcoin, Criminal Activity, cryptocurrency, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Dark Web, DDoS attack, DoS attack, Hacker, Hacking, Hidden Wiki, Illicit substances, Malware, Network Security, Phishing Attack, Webcam hijacking|

The dark web is a part of the internet (or a small part of the deep web) that isn't indexed by search engines. The dark web contains a large amount of illegal and criminal content (from various aspects). Online marketplaces for drugs, exchanges for stolen data, and other illegal activities get most of the attention. [...]

ITIL Framework

Tech20202020-07-13T17:31:14+00:00Categories: Network Security|Tags: Availability Management, Axelos, Business Relationship Management, Capacity Management, cyber security, CyberSecurity, Demand Management, Design Coordination, Financial Management, Information Security Management, IT Service Continuity Management, ITIL, ITIL Framework, ITIL Service Design, ITIL Service Strategy, ITperfection, Network Security, Service Catalog Management, Service Level Management, Service Portfolio Management, Strategy Management, Supplier Management|

The IT Infrastructure Library (ITIL) is a library of volumes describing a framework of best practices for delivering IT services. ITIL’s systematic approach to IT service management can help businesses manage risk, strengthen customer relations, establish cost-effective practices, and build a stable IT environment that allows for growth, scale and change. In fact, ITIL describes [...]

Rapid7 Products

Tech20202020-07-13T06:32:30+00:00Categories: Network Security|Tags: Attacker Behavior Analytics, Cloud applications, cyber security, CyberSecurity, email phishing, File Integrity Monitoring, FIM, Hackers, HIPAA, Insight Cloud, InsightConnect, InsightIDR, InsightOps, InsightVM, ITperfection, Lightweight Endpoint Agent, NetFort, NIST CSF, PCI DSS, Penetration Testing, pentesters, Rapid7, risk classification, Risk Prioritization, SDLC, virtual machine, VM, Vulnerability Management|

Rapid7 Nexpose is a vulnerability scanner which aims to support the entire vulnerability management lifecycle, including discovery, detection, verification, risk classification, impact analysis, reporting and mitigation. RAPID7 plays a very important and effective role in the penetration testing, and most pentesters use RAPID7. This paragraph is abbreviated from www.rapid7.com The following figure shows some of [...]

Metasploit Framework

Tech20202020-09-24T10:28:50+00:00Categories: Network Security|Tags: cyber security, CyberSecurity, Datastore, DRM-free ebook, Dynamic payloads, Exploit, Global datastore, IPS, Metasploit, Metasploit Framework, Meterpreter payloads, Module datastore, Network Security, Nop generator, Payload, Penetration Testing, pentester, Post-exploitation code, Static payloads, Varonis Cyber Workshop|

A kind of penetration testing aid is the Metasploit Project. This open-source framework allows testing via command line alterations or GUI. The Metasploit Framework is a Ruby-based, modular penetration testing platform that enables a pentester (hacker) to writes, tests, and executes exploit code. In other words, the Metasploit framework is a very powerful tool which can [...]

Zero-day Vulnerabilities and Zero-day Exploits

Tech20202020-09-24T10:32:09+00:00Categories: Network Security|Tags: Cyber Attacks, cyber crime, cyber security, CyberSecurity, ITperfection, Malware, Network Attacks, Network Security, Next-Generation Firewall, Zero-day, Zero-day Exploits, Zero-day Vulnerability|

Zero-day is a flaw in software, hardware or firmware that it has the potential to be exploited by cybercriminals. In other words, zero-day is a vulnerability in a system or device that has been disclosed but is not yet patched. A zero day exploit is a cyber-attack that occurs on the same day a weakness [...]

Penetration Testing

Tech20202020-09-24T10:36:23+00:00Categories: Network Security|Tags: Black box pen test, blind pen test, clear-box pen test, Cyber Attacks, cyber crime, cyber security, CyberSecurity, External pen test, Firewall, Gray box pen test, internal pen test, IPS, ITperfection, logic-driven pen test, Network Security, open-box pen test, PCI DSS, Penetration Testing, Phishing Attack, Silverlight, Targeted Pen test, White box pen test|

A penetration test (pen test or pentest and or ethical hacking) is a simulated cyber-attack against a computer system to check for exploitable vulnerabilities. You should not be confused it with a vulnerability assessment. Source: en.wikipedia.org In fact, this test simulates a real-world attack to determine how any defenses will fare and the possible magnitude [...]