The Security, Legal, Ethical, Social And Responsibility Issues Of Port Scanning

* Identify risks, threats, and vulnerabilities in an IP network infrastructure using ZenMap GUI (Nmap) to perform an IP host, port, and services scan

Ping sweeps and port scans are two ways hackers gather information about their targets. They can have a potentially devastating effect on an organization; they are a definite cause for concern. Below, this study explains exactly what ping sweeps and port scans are, how they might affect an organization, and why they are so concerning.

The port scan basically scans the target computer services that use TCP and UDP ports and finds the available open ports. This is harmless as it only scans but it can give away potential information to the attacker and then once the attacker gathers the info, it helps them to plan and launch various attacks. There are different types of port scanning tools available for free such as nmap and SAINT but nmap is the most used tools to scan a network as it hardly needs administrative rights to run the

Since the onset of the first packet switching event that many believe to be beginning of the internet, no other technology besides the printing press has ever transformed the ability to deliver information. Although the internet is used by a large percentage of the civilized world, few Americans realize how vital cyberspace is to our national infrastructure. Today, we are faced with even more threats although it has been a recognized problem since 2009, when President Barrack Obama said “The cyber threat is one of the most serious economic and national security challenges we face as a nation. It’s also clear that we’re not as prepared as we should be, as a government or as a country (Obama, 2009).” Every industry that operates in the United States is dependent on the internet for some aspect of their business. Commerce, transportation, financial institutions, military, as well as industrial control systems are all interconnected. This interconnectedness has created vulnerabilities within their infrastructure that have increasingly become targets of terrorists, script kiddies, foreign governments and hackers of all types.

The use of Flow Analysis Port Scan to determine the open ports on routers or hosts

…utilizing cyber technology, as well as old-fashioned police work (surveillance, marking pieces with an ultraviolet dye at ports of entry, and making controlled buys) to build a case.

Vulnerability scanners can identify security holes of network or to find the potential point of exploit on computer. These scanners detects and classifies system weaknesses in computers, networks and communications equipment, predicts the effectiveness countermeasures and evaluate how well they work after they are put into use.

Hackers typically follow a five-step approach to seek out and destroy targeted hosts. The first step in performing an attack is to plan the attack by identifying the target and learning as much as possible about it. Hackers usually perform an initial reconnaissance and probing scan to identify IP hosts, open ports, and services enabled on servers and workstations. In this lab, you planned an attack on 172.30.0.0/24 where the VM server farm resides, and used the Zenmap GUI to perform an “Intense Scan” on the targeted IP subnetwork.

Today we can find types of network security treaties differ in their nature. Ping sweeps and port scans are one of the big issues that companies facing in current business world. This report will provide brief explanation about these treats and what are the impacts in the organization business.

First, I want to describe who the subjects of the issue are. In my opinion, the issue is the most relevant for the private and commercial information. Home users risk their security while connected to

Corporation Tech IT reserves the right to perform periodic port scans, segment sweeps, and vulnerability scans on all network segments.

As early as the mid-1960s computer experts, were warning government and businesses about the ability of computers to exchange data would inevitably lead to attempts to penetrate these systems to gain access to the data. Security concerns were increased further during a computer conference in 1965, were participate, including government contractors and some very large corporations such as IBM and Bell, shared information about their systems. During this conference, it was revealed the security the participates were implementing could be easily circumvented, allowing access to their data. This resulted in the first request for security auditing and penetration testing (Pen-Testing). With concerns regarding security increasing, during the 1967 annual Joint Computer Conference where 15,000 computer security experts, government and business analysts met to discuss concerns about computers sharing data, and better understand the need for tight network

Surveillance cameras: These are special video cameras fitted at designated points of the port. They capture at least most of the actions carried out within the premises of the port. These cameras are normally positioned in areas that are out of bounds or inaccessible to individuals. Such a component is important in a port as it monitors and records movements of goods and people in and out of the port. In the event of illegal actions, those individuals captured by the camera are easily brought to book. In addition, the presence of these cameras serves as a deterrent to people who may be planning to carry out illegal activities at the port.

Logical and physical view of the network helps administrators and engineer to identify possible security issues. Hackers try to obtain access to highly sensitive data by first creating map of the network

The frequency and severity of cyber-attacks on maritime targets increases every year. Often the damage is not discovered until years later. The cyber-attack on the port of Antwerp began in 2011 and continued until it was discovered in 2013. The Danish Maritime Authority was attacked in 2012 by a virus contained in a PDF (portable document format by Adobe). The virus spread throughout the Maritime Authority’s network and into Danish government institutions before it was discovered in 2014. Reasons for the ever-increasing security exposure include the growing use and interdependence of computer systems, the relative ease and extreme value of executing attacks, and the exceptional difficulty in identifying the culprits and bringing them to justice. Regrettably, some port authorities contribute to their vulnerability by addressing cyber-security as a technology threat best left to IT professionals. On the contrary, successful and serious cyber-attacks are inevitable and the planned response must be subject to the same governance and scrutiny that any existential threat would receive. One reason that port authorities hesitate to engage cyber-threats at the Board level is a lack of appreciation for just how impossible cyber-security is. A more complete understanding of the factors that complicate cyber-security can assist Directors in stepping up to set priorities and oversee contingency and remediation plans.