Malicious Traffic For Network Security Essay

Based on current sources available, we have medium confidence that China will continue to conduct cyber espionage against United States defenses and military systems. It is not a new development as China’s People’s Liberation Army (PLA) cyber team has been behind many attacks against US defense firms and military systems as early as 2007. The KIQ for this assessment is: How vulnerable our Military and Defense sectors systems to cyber-attacks? It is imperative to US National Security, because outside actors, like the PLA, are exploiting our defense and military systems that can disrupt future operations both domestic and abroad. After a short background on China we will address the fallowing: Their motives, methods, targets, and challenges we face to combat Chinese cyber warfare.

On July 24, 2013 Senator John Rockefeller introduced a bill into Congress with the name 'Cybersecurity Enhancement Act.' This law was proposed with the purpose of helping to establish a partnership between the public and private entities to research and enforce Cybersecurity in order to make the online experience safer for everyone. This bill allowed the Department of Homeland Security to lay a foundation for private sectors as well as the public to enhance the efforts of Cybersecurity. This platform would provide “the government and private sector to share information about cybersecurity threats, incident response, and technical assistance” (Skeath). This bill was first introduced in the Senate and it passed. The bill again passed through

Use this section to describe any network security vulnerabilities. Use the scenario along with industry standards and best practices to identify the vulnerabilities. Describe why it is vulnerable and what the implication is if it is not mitigated.

Network security has changed significantly over the past years. There is more and more data to monitor and analyze in order to detect the activity of your data and systems. Securing a network has many variables. Password authentication, network access, patches, anti-virus protection, intrusion detection, firewall and network monitoring tools are just a few of the things you can do to protect yourself.

According to the U.S. Department of Homeland Security in the article Cyber Threats to Mobile Phones, phones are now sharing hardware and software similar to a PC and becoming each time more like a PC. Therefore, the risks of being hacked are increasing, allowing hackers to attack mobile devices the same way as if they were doing it with a regular PC. Personal and professional information are more often stored on mobile devices therefore it is imperative to have our data secure. Security solutions for mobile devices are not as broad or high-tech as those for PCs. The majority of mobile security relies on the proper use and smart choices that the user makes on a daily basis to be protected against cyber attacks. Even the most careful person can be attacked but the possibilities of that happening are less when you are proactive.

exploitation human based mostly behavior analysis. Then the malwares are classified into malware families Worms and Trojans. The limitation of this work is that customization using human analysis isn't potential for today’s real time traffic that is voluminous and having a range of threats.

In the world of computer and network security, there are myriad ways to launch an attack, which, from the perspective of a network, can usually be defined as "traffic that has vicious intent." There are infinite computer attacks that no firewall can prevent, such as those executed locally on the machine by a malicious user. From the network's perspective, there are numerous types of attack. Attacks can be grouped into two types: brute force and precision. Juniper Firewall has the capability to protect against both types of attack. Denial of Service (DoS) attacks are one of the most well-known network security threats under brute force attacks, which is largely due to the high-profile way in which they can

Anomaly-Based techniques attempt to detect computer intrusions and misuse by monitoring system activity and classifying it as either normal or anomalous[1]. Anomaly based detection techniques solve the problem of detecting unknown bots based on the traffic anomalies such as high network latency, high volumes of traffic, traffic on unusual ports, and unusual system behavior[1]. Nevertheless this technique meets the problem of detecting unknown botnets[1,2]. Anomaly based detection techniques are classified into two categories: host-based and network based techniques[2].

Cyber security and network breaches have received a great deal of attention in recent headlines. As the world becomes ever more tightly interconnected by electronic networks, governments, institutions, and private citizens find themselves becoming ever more heavily reliant upon these silent digital workhorses. At the same time, the amount of traffic and processing that goes on ?behind the scenes,? virtually unnoticed, has all but exploded.

** Anomaly detection –The anomaly detector monitors network segments to compare their state to the normal baseline and look for anomalies.

We examined the usage of the HTTP convecton .HTTP is mostly used in the internet .The information used is just with TCP and the default arrangment that uses port 80.SMTP 8 POP 3 doesn’t influence sytem movement .The graph indicate the large number of TCP from the single IP adress and the only two IP generating a lot of TCP traffic in the network that’s why its observed that there is a malfucntionnig in the network traffic that is been generated becaues one IP adress has checked all the ports of other IP address and this could compromise the system network.

The three specific potential malicious attacks and threats that could be carried out against the network and organization are malicious attack, malicious, and the risk, threats, and vulnerabilities that is carried out against the network and organization. Malicious Attack is an attempt to forcefully abuse or take advantage of someone 's computer, whether through computer viruses, social engineering, phishing, or other types of social engineering. Malicious Attack have four general categories of attacks on computer systems and networks. The first it have to fabrications and that involve the creation of some deception in order to trick unsuspecting users. (Kim, D., & Solomon, M., 2012). That is like when you get a call on you home phone from Windows text support, when you give them your information and the information on your router. That mean you got trick by an unsuspecting users known as a scammer. Next it is interceptions and that involves eavesdropping on transmissions and redirecting them for unauthorized use. (Kim, D., & Solomon, M., 2012) Any wireless network using a username and password to allow entrance into a local network is susceptible to interception and traffic monitoring attacks. Then it is interruptions and it cause a break in a communications channel, which blocks the transmission of data. (Kim, D., & Solomon, M., 2012) Like when you online and you trying to get information offline and it take a long time to load up.

This baseline will then identify what is the users normal behaviour gaining an idea of what bandwidth is generally used, what protocols are used, what ports and devices generally connect to each other- and alert the administrator or user of an uncommon or anomalous port use, network traffic and software downloads is detected. Significantly different than the baseline.

As networks and computer systems become universal and exposed, security threats and risks continue to grow more rapidly. This causes enormous threats; therefore, Security specialists and experts are continuously trying to find solutions for these kinds of threats through different methods like attack signatures and looking for methods to prevent them. Nevertheless, as solutions are formed, new types of threats emerge, for example spam mails, spywares, worms and Trojans just to mention a few.

Spywares and Loggers: There are many common applications that are broadly used for information gathering reasons. They can be easily concealed behind seemingly conventional