Threat Assessment of Ping Sweeps and Port Scans Essay

Despite the presence of network security devices such as firewalls and other security appliances, today's corporate networks are still vulnerable to both internal and external attacks by hackers intent on creating havoc. By proactively

The port scan basically scans the target computer services that use TCP and UDP ports and finds the available open ports. This is harmless as it only scans but it can give away potential information to the attacker and then once the attacker gathers the info, it helps them to plan and launch various attacks. There are different types of port scanning tools available for free such as nmap and SAINT but nmap is the most used tools to scan a network as it hardly needs administrative rights to run the

Unfortunately, many firewalls come with so many rules or policies that they can counteract the security desired and create loopholes for network threats or actually block traffic that is desired or requested by the user. These issues make it really important to understand how all rules and policies in the firewall work and how to apply them.

The use of Flow Analysis Port Scan to determine the open ports on routers or hosts

Network-Based Scanner helps detect critical vulnerabilities for example mis-configured firewalls, risks associated with vendor-supplied software, vulnerable web servers, and risks associated with systems administration and network.

Network inventory – know exactly how many printers, computers, switches, hubs, etc. are connected to the network. You cannot secure what you cannot see. This is also a great

Monitor all network traffic and alert personnel to suspected compromises using network intrusion-detection systems, host-based intrusion detection systems, and intrusion-prevention systems.

A port scan can be used for benign reasons as they are tool for network administrators to see what services are running on the machine. The scan sends a signal to each port one at a time and depending on the type of response the port is deemed open or closed. "A port scan is a method used by intruders to discover the services running on a target machine. It allows the attacked to see which ports are more vulnerable than others. It is equivalent to a burglar or thief canvassing a whole neighborhood to see which houses are less protected and more vulnerable. There are ways to defend yourselves from this type of attack but it requires one to assume that you are vulnerable completely. No one machine on a network is completely safe from an intruder. There are numerous products that can help protect you from these types of intrusions but simply turning your unused services off can be the biggest step toward securing your ports. "For example, in a Windows XP platform you would click on start, then run, type “services.msc” without the quotes, and click ok. After that a list of services will appear" (Facts, 2014). Then you would choose which services to disable and you're

Every server area as well as the network access points must be monitored by personnel to ensure that only those who should have access to the data are able to gain access to the physical point of connection or into the NOC (Network Operation Center) itself. Physical access points throughout the wired and wireless network need to be audited and turned off when not in use. Varied levels of access to each data access point should be appropriate for the needs of that specific terminal or network address. By closely monitoring the levels of data in which each access point or user has the ability to view, one immediately closes most

One of the largest manufacturing, design and marketing companies was breached when its antivirus software failed. This allowed hackers to access 600+ endpoints. As a result of the attack, the organization’s IT team faced around-the-clock work and it placed a heavy strain on internal resources. Existing internal tools were not providing enough visibility to solve the problem, and the organization struggled to remediate the issues. The organization needed to immediately

Surveillance cameras: These are special video cameras fitted at designated points of the port. They capture at least most of the actions carried out within the premises of the port. These cameras are normally positioned in areas that are out of bounds or inaccessible to individuals. Such a component is important in a port as it monitors and records movements of goods and people in and out of the port. In the event of illegal actions, those individuals captured by the camera are easily brought to book. In addition, the presence of these cameras serves as a deterrent to people who may be planning to carry out illegal activities at the port.

An analysis on the vulnerabilities as well as the use of cyber intrusions in an organizational network has become key for running businesses (Sengupta, Mazumdar & Bagchi, 2011). Enterprises including academic facilities, government parastatals and manufacturing firms are started to carry out business. The organizations mentioned above will in one way or another need an enterprise network to ensure that there is smooth running of operations for success in their undertakings. The network is made up of software and hardware systems, transmission media, devices and employees. Different organizations

From the tactical viewpoint, within the pages of Hacking Exposed the authors provide recipes for exploiting vulnerabilities, as well as instructions on countering exploitations. With regard to sniffing, the text covers a variety of security weaknesses and recommends several software applications that can be used to find a network’s Achilles heel. Cain and KerbSniff are two tools in particular that can be used for eavesdropping on a network password exchange in the Windows environment (McClure et al., 2009, pp. 169-170). Furthermore, network sniffing can be accomplished by using applications such as tcpdump, Snort, and Wireshark, which allow anyone with the means to view traffic across a network. This can be helpful for trying to debug network problems, but in the wrong hands it can prove to be invaluable in

The monitoring of Internet activity along with regular scanning of company computers, including the files and documents it contains, helps protect not only the computer equipment but any secure information that can potentially be harmed or even extracted by attacks or computer hackers. When users visit a Web site, they may be asked to provide specific registration information, which can be used to create an individual user profile when combined with other data collected through tracking technology. Consequently, this information can be used to send unsolicited bulk e-mail,

Modern businesses are faced with major security threats especially to their information systems. The complexity of systems has not helped in mitigating these threats. With the massive adaption of information systems within organizations, they have become the cornerstones for organizations and this has made the systems more vulnerable to sabotage and potential attacks. There are both external and internal threats to information systems, which can be accidental or intentional. The threats to information systems are multilayered, and they can affect a couple of components like networks, software applications, operating systems, intranet, internet, and wireless technologies.