Hackers may be able to fool you into believing that their web site is actually a web site (such as a bank or credit card web site) that you trust. This may be done by misleading email, or even by breaking into the network infrastructure and rerouting network traffic destined for, say mybank.com, to the hacker’s site. If you enter your user name and password on the hacker’s site, the site can record it and use it later to break into your account at the real site. When you use a URL such as https://mybank.com, the HTTPS protocol is used to prevent such attacks. Explain how the protocol might use digital certificates to verify authenticity of the site.

Hackers may be able to fool you into believing that their web site is actually a web site (such as a bank or credit card web site) that you trust. This may be done by misleading email, or even by breaking into the network infrastructure and rerouting network traffic destined for, say mybank.com, to the hacker’s site. If you enter your user name and password on the hacker’s site, the site can record it and use it later to break into your account at the real site. When you use a URL such as https://mybank.com, the HTTPS protocol is used to prevent such attacks. Explain how the protocol might use digital certificates to verify authenticity of the site.

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter12: Protection Mechanisms

Section: Chapter Questions

Problem 5RQ

See similar textbooks

Similar questions

Https is a protocol used to secure websites from being tampered with by other parties without proper authorization. it bridges the gap between sender and receiver.Using protocols like secure socket layer/TLS, HTTPS encrypts data sent over the internet, making it unreadable to anybody who shouldn't have it.This prevents a "man in the middle" assault on the system.Such assaults intercept messages before they reach their intended recipient.It then transmits the revised information to the user.It guarantees the server's authenticity, too.
Differentiating spoofing from session hijacking is important. If you use the internet, tell us two measures you take to protect yourself against session hijacking.
A Network Security Design is necessary for a corporation to effectively protect its servers, since most of its operations are performed by servers on a flat network. A demilitarised zone is an option that has not been ruled out. If you could redesign the network from the ground up, what would you change?
Distinguish the different types of DNS records. Each one will be briefly talked about, with specific examples and reasons for why they should be used. Web and mail servers in the same company can have the same hostname alias, but this isn't always possible.
A neighbor hacks into your password-protected wireless network on a regular basis, even though you didn't give him the password. Is there a particular fault that was overlooked?
Malicious traffic could be sent from one VLAN to another as a way to get into a network. The usual way the attacker attacks must be found out. If you know how to stop this from happening, please explain your ideas in detail.
What is IP spoofing, and how does it work? Spoofing an IP address is technically a security issue, right?
The network address for an organisation’s network is 54.33.112.0/23. Provide the subset of the filter table for a stateless firewall that includes the following rules: - Allows all internal users to establish HTTP with any external hosts but blocks FTP. - Allows external users to browse the company web page at 54.33.112.4 - Allow incoming TELNET requests to all organisation hosts apart from those in subnet 54.33.112.0/24 THIS IS ALL INFORMATION PROVIDED PLEASE My last question about has not been responded correctly, please you must provide the subset of the filter table for a stateless firewall that includes the following rules.
Network intrusions may happen in a variety of ways, including by redirecting malicious traffic from one VLAN to another. A pattern of assault should be recognized by the attacker. Describe all of the steps you'll take to avoid this happening in the future.
When trying to break into a network, hackers may attempt to mask their attack traffic by switching its source VLAN with one of the intended victims' VLANs. Only by discovering the normal actions linked with an attack can the culprit be located. All the safety precautions you can think of should be listed.
In network security, it is important to understand port scanning. Hackers use tools to scan a network and determine if there are open ports and if they contain some sort of vulnerability. To scan ports, you first have to find active hosts on a network. Once you find active hosts and discover a list of IP addresses for those hosts, a port scan can be performed to gather information about open ports and analyze services running on those ports. A port scan is the process of sending packets to an active host's ports and learning details that can help you gain access to that host or to discover open vulnerabilities on your network. Some common ports are: Port 20 - File Transfer Protocol or FTPPort 22 - Secure Shell protocol or SSHPort 23 - Telnet protocol for unencrypted transferPort 80 - HyperText Transfer Protocol or HTTPPort 443 - HyperText Transfer Protocol Secure or HTTPS The Well Known Ports are those from 0 through 1023 We are going to simulate a port scan by filling a list with 100…
Discover more about DNS lookups by starting with the root, the most trusted server, and going deeper.