Chapter 2: Why Security Is Needed

Why is it important to use protocol capture tools and protocol analyzers as an information systems security professional?

In the early days of computing, a hacker was primarily referred to as a computer guru, someone who is extremely technical with a high expertise in computer also known as “Expert Programmers”. Nevertheless, as technology is advancing at a face pace, hacking has adopted a completely different definition. The modern definition is someone who access a computer system primarily to steal or destroy information. Hacking has caused major harm in the realm of technology. Over the years, hackers have become much more lethal in their craft. They manage to break into complex information systems from entities such as banks, government agencies, and private businesses. Furthermore, they often manipulate their victims through social engineering in order to obtain financial benefits. Hackers hold different label such as: black hat hacker and white hat hacker in which all have their own motives.

The word hacking, usually associated with information technology, is a term used for the development of creative solutions for a problem by someone in a non-professional environment. With the introduction of personal computers and the internet, anyone could create solutions to problems in computer science. This led to the emergence of “hacker culture”, leading to the decentralization of computer industry (Hicks, 2014).

Firewall: A firewall is a software or hardware-based network security system that controls the incoming and outgoing network traffic by analysing the data packets and

Malware refers to any computer program that is designed to do things that are harmful to or unwanted by a computer's legitimate user.

Which of the following has the ultimate and final responsibility for network security in an organization?

Hacking: Hacking is a type of crime which involves gaining unauthorized access to a computer and changing the system in such a way as to permit continued access without the knowledge or approval of the systems owners.

Which e-mail attack occurs when an attacker routes large quantities of e-mail to the target system?

The majority of web application attacks occur through three avenues Cross-site scripting (XSS), SQL injection attacks and Phishing.

A firewall is a system designed to prevent unauthorized access to or from a private network. You can implement a firewall in either hardware or software form, or a combination of both. Firewalls prevent unauthorized Internet users from accessing private networks connected to the Internet, especially intranets. All messages entering or leaving the intranet (i.e., the local network to which you are connected) must pass through the firewall, which examines each message and blocks those that do not meet the specified security criteria. In protecting private information, a firewall is considered a first line of defense; it cannot be the only line of defense. Firewalls are generally designed to protect network traffic and connections, and therefore do not attempt to authenticate individual users when determining who can access a particular computer or network. Furthermore, firewalls can be set up to prevent employees from accessing certain content or downloading

Malicious bots are software applications that run automated tasks. These bots are also increasing; when they are used they create automated attacks on networks.

A firewall is a system or group of systems that enforces an access control policy between two or more networks. The means by which this control is accomplished varies widely, but in principle, the firewall is a pair of mechanisms, one that blocks traffic and one that permits traffic. Some firewalls emphasize blocking traffic, while others emphasize permitting traffic. The most important thing to recognize about a firewall is that it implements an access control policy. If you don't know what kind of access you want to permit or deny, or you let someone else or some product configure a firewall based on judgment other than yours, that entity is making policy for your whole organization.

Computer hacking: Is the practice of modifying computer hardware and software to accomplish a goal outside of the creator’s original purpose. People who engage in computer hacking activities are often called hackers. Since the word “hack” has long been used to describe someone who is incompetent at his/her profession, some hackers claim this term is offensive and fails to give appropriate recognition to their skills. The majority of hackers are technology buffs. They are self-motivated and learning about computers is their true passion. ("What Is Computer Hacking?" WiseGEEK. N.p., n.d. Web. 27 July 2013).

For some individuals, hacking can be a hobby they like to undertake in order to analyze how many computers or the systems they can gain access to. While hacking seems harmless, there are those who do this vice maliciously so that they can get access to customer/ client information, the details of credit cards, their passwords, email addresses and identity fraud (Riem, 2001). Having this unauthorized access to these information warrants an arrest, and should the criminals be found, they are liable for their crimes.

The fight against hackers and cyber crime is a global problem and nationally and internationally, the threats they caused have been recognized and acknowledged.