Information Security Risk Analysis and Management

The purpose of this paper is to touch on the issue of Hacking. It will go into detail about the history, evolution, future and prevention of Hacking. In addition, this paper will discuss different types of hackers and their motivation behind hacking. This paper examines the major impact caused by malicious hackers and give modern examples of such attacks. To conclude, it will predict how hacking will be in the near future and give the precautionary measures Information Security professionals can take to mitigate the risk of being victimized.

Cryptanalysis is the study of analyzing information systems in an attempt to learn the secluded aspects of the systems. It is used to break cryptographic security systems and gain access to the contents of encrypted messages. In The Code Book, it analyzes how people can invade your internet privacy even if you code your information. Viruses on the internet can decipher subsequent messages and programs such as the Trojan Horse can appear as a genuine encryption product, but which actually betrays

on the success and the process time of the dictionary attack. These passwords are based from

This type of attack is usually used for bringing down the systems at once by constantly sending massive amount of URL requests or overloading the server’s network traffic with bogus information. This is purposefully done to either a user’s system or the whole network to interrupt it partially or render it completely useless. When the system is brought down to its knees, the crackers either transform the complete system/website or do some manipulate some particular component to benefit from

This utilizations two sorts of assaults Dictionary assault and Brute Force Attack for hacking wifi passwords.

Viruses and worms are malicious programs that self-replicate on computers or through computer systems without the user being cognizant. Worms are a series programs that repeat themselves from system to system minus the use of a host fie. Worms use methods to infiltrate remote computers and launch replicas of themselves like email messages or coping files to an accessible disk. A computer virus is a

Weak passwords are responsible for 76% of data breaches (Keeper Security Whitepaper). Cyber criminals have become much more sophisticated in the past few years at breaking passwords. Two major types of “cracking” methods are used: brute force and dictionary attacks. Brute force is “a trial and error method used by application programs to decode data such as passwords or Data Encryption Standards keys, through exhaustive effort”, thus the term brute force. It is similar to a thief trying multiple combinations to “crack” a safe. Dictionary attacks use large dictionaries, sometimes containing millions of words, to defeat passwords. This technique has been enhanced by the number of accounts that have been compromised in the past few years.

Computer viruses are minute program which is “embedded inside an application or within a data file which can copy itself into another program“(Adams et al, 2008 ) for the sole determination of meddling with normal computer operations. The consequences may range from corruption and deletion of data; propagation of virus on to network and deployment through attachments through emails in order to further creating havoc to all associated computing devices.

Spoofing refers to a technique implemented by hackers to gain unauthorized access to computers (Goutam 15). The attack comes from the idea that the hacker can use a trusted server on a given network to relay the message. Once received by the target computer, the message will seem legitimate because it came from an already known source. In terms of passwords this can mean hackers do not have to use the designated computer and could get in from anywhere. Thusly, this attack will be

Computer hacking: Is the practice of modifying computer hardware and software to accomplish a goal outside of the creator’s original purpose. People who engage in computer hacking activities are often called hackers. Since the word “hack” has long been used to describe someone who is incompetent at his/her profession, some hackers claim this term is offensive and fails to give appropriate recognition to their skills. The majority of hackers are technology buffs. They are self-motivated and learning about computers is their true passion. ("What Is Computer Hacking?" WiseGEEK. N.p., n.d. Web. 27 July 2013).

Data, software, networks and procedure are the most directly affected by the study of information security. Data and software are the most associated with the study of security.

Hacking is the process of gaining unauthorized access to information through various means like systems or computers. In the context of computer security, a hacker is that person who looks for weakness in a system so that they can gain access to unauthorized information. They are motivated by various reasons like protest, profits or evaluating the entire system weaknesses.

There are special viruses that creates different types of malicious problems on a network or computer, for instance it will create or open programs to perform tasks. Viruses is also used for denial of service attacks, password cracking and many more. This can be fought against by having a reliable protection service; it is safer if this is taken from the provider itself.

-The technical definition of computer crimes is an act performed by a knowledgeable computer user, sometimes referred to as a hacker that illegally browse or steals a company 's or individual 's private information, but in general terms, it is the unauthorized use of a computer for personal gain, as in the illegal transfer of funds or to alter the data or property of others (Computer Crime, 2016). There are four major categories of computer crimes, first we will discuss using the computer as a target. When using the computer as a target, they must do two things: intrusion meaning to gain access to the computer and deny the owner of the computer access to the service and data. Intrusion is when the individual alters the data. To use the computer as a target, the hacker must alter the password and/or login and by doing this he is denying the owner access to the data. If a hacker makes a copy of data they are denying the owner rights to privacy of his or her data. The hacker will use that information to intrude upon another computer. One popular method that can be used to deny service is to

to crack by using traditional method e.g. Brute force. So Mostly Attacks performed passively which is also known as Side Channel