Showing posts with label Safety. Show all posts
Spoofing
It is the process in which somebody tries to get access to your system by pretending as he/she is at trusted person on your system . In this person alter his identity so anyone can trust them because they have a fake identity of your friend or any relative .
Types of Spoofing
It is of four types :
• IP spoofing.
In this attacker switch it's IP address to gain information and to get access on your computer
• Email spoofing.
In this attacker try to get essential information by sending you a frank emails . They ask you give your valuable information as reply .Your response to their emails will help them in crackiong your password
• Web spoofing.
This is the most popular attack on the web in this attacker try install their hacking tools on your system in the form of viruses after that they get all your information easily That is they try to install a key logger on your system after that they easily get your password I.D's and many more
• Non-technical spoofing.
This is attack involves corruption activities by the employ of a company or worker who knows the sensitive information about company or a system
Be Updated Be Safe !
Cheers !!
Brute-force Attacks
If attacker want to crack a password then he can crack any passwords by Brute-force attacks he has to try every possible combination of letters, numbers, and special characters until he succeeded . This is a time taking method it actually depends on the efficiency of the processor of your computer
This
attack is actually based on hit and trial method used to obtain information such as a
user password or personal identification number (PIN). In a brute force
attack, automated programs ,scripts and codes is used to generate a large number of
consecutive guesses as to the value of the desired data. Brute force
attacks may be used by criminals to crack encrypted data, or by security
analysts to test an organization's network security.
The following measures can be used to defend against brute force attacks:
- Requiring users to have complex passwords
- Limiting the number of times a user can attempt to log in
- Temporarily locking out users who exceed the specified maximum number of login attempts
Be updated Be safe !
Cheers
Hello Readers !!
Generally Unix and Linux base system are suitable for this kind of attacks. And works on scripts . When the core operating system or application is installed, the manufacturers distribute sample files and scripts so that the owner of the system can better
These system works and can use the scripts to develop new applications. From a developer’s standpoint, this is extremely helpful. The most of the people think that Why to create our own when you can use someone else’s script and just build onto it? In one of my jobs, I programmed and developed source code. Being able to use sample source code as a template helped increase the development time tremendously.
One of the main areas where there are a lot of sample scripts is in web development. The earlier versions of Apache web server and some web browsers came with several scripts and most of them had vulnerabilities. Also, a lot of the new scripting tools that come with web browsers enable developers with minimal programming knowledge to develop applications in a relatively short period of time.
In these cases, the applications work, but what’s going on behind the scene is usually pretty scary from a security standpoint. There is usually a lot of extraneous code and poor error-checking, which create an open door for attackers. Active Server Pages (ASPs) are a perfect example. Much of the early development that occurred with ASPs left a lot of backdoors that attackers are exploiting. An example is the default web msite that ships with IIS. It has the remote admin tools available from the main page. These tools can be used by an attacker to compromise a system.
Be Updated Be safe
cheers !!
Hello Readers !!
These attacks take advantage of the lack of security in today’s software.In the programming development cycle there are levels in which one of them is a security check level which is been ignored by the developers because they want to work more and earn more &
It also major problem with most software that is currently being developed is that the programmers and testers are under very tight deadlines to release a product. Because of this, testing is not as thorough as it should be. To add to this, the problem becomes worse since software that is being developed has so much added functionality and complexity that even if there were more time to test, the chances of testing every feature would still be small. Also, until very recently, consumers were not concerned about security. If it had all of the great features they needed they were happy, regardless of the number of security vulnerabilities that existed in the software. Security should not be an add-on component. To provide a high level of security, it has to be designed into the application from the beginning.
Another major problem found in most programs is error-checking. Poor or
nonexistent error-checking accounts for a large number of security holes
found in today’s programs. Buffer overflows are just one example of this
problem.
