Identifying Potential Malicious Attacks, Threats and Vulnerabilities

Despite the presence of network security devices such as firewalls and other security appliances, today's corporate networks are still vulnerable to both internal and external attacks by hackers intent on creating havoc. By proactively

The likelihood of an attack or breach dealing with the current infrastructure of the company’s

All three of theses are high for impact as they can cause great deal of damage to the network and control I’ve listed as medium because there is the human action that must be considered. Virus and malware detection software should be installed and kept up-to-date as well as training for users to understand how to use email. Users should always be aware of who is sending them email and not open attachments from users they do not know or unsure of. Phishing is easy and generally great way of gaining access to a network, people in general want to help, they may get an email or a phone call from someone posing as something they should be able to trust and provide details that could allow the hacker to gain access to their network. Information such as equipment type (server, firewall, routers), IP address, email addresses, any of this information could be used to stage an attack on the network. Again training is key here. If you train your employees well on data security they will know what they can and can’t answer and whom to send request to so they can be followed-up on. The last one for the Workstation is the

One of these consequences are the injection of a Trojan virus, which is a virus that is hidden to act like a legitimate program or file. Another consequence would be exposing the network to a worm, which could propagate throughout the network and cripple productivity by machine and network slowdowns; this is in addition to possibly injecting other viruses onto the system. Although these are possibilities of allowing outside resources access to the company network, user training, disabling resources, and even standalone virus scanners can prevent these unintentional

A company's website is its public face; its internal networks are its concealed valuables. If hacking a website is akin to throwing toilet paper onto a company's front lawn, then hacking into its internal networks is like breaking into its house and stealing its jewelry.

With any network organization you want to make sure that you keep on top of vulnerabilities of anything that reaches out to the internet. Computers and servers that touch the internet are ones that must be scanned. As a company you have to make sure that you configure the security settings for the operating system, internet

identify rogue agents, corrupt officials and leakers, and draws on a Defense Department model under development for more than a decade, according to officials and documents reviewed by the AP. (2014)

Over the last few years the amount of security breaches that have been reported have had one factor that has been prevalent in majority of the attacks. That factor is the employee’s and how they are manipulated into giving the intruder/hacker exactly what they needed without realizing it. The use of social engineering in data breaches and fraud has been steadily increasing over the years. Confidentiality, integrity, and availability the three components of the CIA triad in network security can all be compromised by the risk of social engineering.

4. Security Awareness: A large percentage of successful attacks do not necessarily exploit technical vulnerabilities. Instead they rely on social engineering and people’s willingness to trust others. There are two extremes: either employees in an organization totally mistrust each other to such an extent that the sharing of data or information is nil; or, at the other end of the scale, you have total trust between all employees. In organizations neither approach is desirable. There has to be an element of trust throughout an organization but checks and balances are just as

The breaches happen in the organization if the network administrator/Security chief of the organization is not keen in observing and if the employee is careless or not aware then the hacker gains access to lot of confidential information. (Data Breaches, n.d.)

Cybercrime - A hacker breaks into your network file server and disables access. Just like some buildings require perimeter security, a computer network requires it at external entry points as well - a firewall, which prevents unauthorized access to the company network, along with an anti-virus solution to prevent hackers from stealing information via malware.

With the increase in threats over the past few years it is no longer acceptable for an organization to feel data is protected

Individuals are always finding ways to get around encryptions, firewalls, and other means of blocking intrusion just to destroy a company 's databases and network 's. There are some basics like offsite storage and the use of online backup that can help companies to be prepared for the worst. The data that companies handle usually equals money, and because of this data needs to be protected by backing that data up and/or duplicated off site.

Threats to your network is becoming more complex and it is requiring lots of money, time and sacrifices to keep up with the growing amount of potential attacks. Companies cannot protect themselves with just a firewall anymore. Now it's requiring a full security department that

If the infrastructure of a network is exposed and accessible to anyone this leaves the network vulnerable to damage both