Denial of Service Essay

Submitted By johnathondough0
Words: 1704
Pages: 7
Open Document
Hacking
Denial of Service (DoS) John Dough
Insert a University

Scenario
When defending a network against a DoS or DDoS type attack it is important to view it in the correct way. This type of attack can be defended in a number of ways. The first is to prevent malware from entering the network in the first place, which can be addressed by training employees on basic security measures. However this is more of a technique to reduce not prevent attacks. The second way to counteract a DDoS or DoS attack is by a stronger network design and infrastructure.
Suggestions
The first method in providing a countermeasure to a DDoS attack is to eliminate common security violations that could cause you or your network to be susceptible to malware. This entire concept makes me think of a very famous quote by Sun Tzu in the Art of War, “every battle is won before it is ever fought.” If a company can get its staff to marginally reduce the most common security errors then it can significantly improve its chances of preventing an attack. The most common errors are listed below (Perrin, C 2008). 1. Using unsecure emails/computers to send sensitive emails 2. Spamming coworkers and opening personal emails corporate computers 3. Basing passwords on personal information 4. Basing your security on what is currently popular or what vendor recommend, not your needs 5. Inexperienced security personnel working on your staff 6. Not including “testing” as a part of your implementation process 7. Making everything “sensitive” results in nothing being “sensitive” 8. Using badges or other items that can be duplicated or counterfeited
In addition, some DDoS attacks are the results of gathering data that was done in person. For example, gathering data on the practices of your company by a guest or a passerby. This sort of action can lead to dumpster diving, shoulder surfing, collecting business cards, leaving USB’s in a parking lot or lobby as though it were lost and other forms of social engineering. We are at a point in time in history where social networking has become part of not only our personal lives but our professional lives. Companies are making sites like Facebook, Twitter, MySpace, LinkedIn, etc an extension of their company. There are reports of intruders using social networking through these sites to gain information to attack a company. Staff who are on sites like these need to be careful of how much personal data they show and what is private on these sites.
A scenario I’ve recently been made aware of is a person who works at a major defense contracting company. They have many facebook friends and over 75 that are coworkers and work in a variety of government agencies. They “became friends” with a person who they really didn’t that well and that person now had a list of 74 other people to be potential victims and they each had friends that were in the same line of work. In fact, it lead to the internal facebook site which he shouldn’t have been granted access to, but was. He knew his one of his friends work email which lead to him figuring out most of the other peoples email and then launched a series of spam email attacks. Companies like this can’t stop people making friends on facebook with coworkers but do they need to promote joining their page and if so shouldn’t they be more careful of who they add. Some companies are beginning to keep some PII (Personally Identifiable Information) on their pages more private but trolling social networking sites is quickly becoming a popular form of social engineering.
There are also other actions that may seem like common sense but are frequently overlooked such as adhering to a procedures and policies handbook mainstay of not going to inappropriate sites. These sites can be laden with malicious files, spyware, adware or even XSS (Cross Site Scripting) attacks. Any one of these can lead to the opening an intruder is looking for.
The
Show More

Related Documents: Denial of Service Essay

Microeconomics: Denial-of-service Attack and highly Publicized Denial-of-service Essay

concern in Atlanta, hurricanes might be a problem in Oklahoma, etc... #17: Denial-of-service attacks are a single user sending a large number of connections in a attempt to overwhelm a target server. Distributed denial-of-seervice is when many users (or many compramized systems) simultaniously perform a denial-of-service attack. The distributed denial-of-service is more dangerous because unlike a denial-of-service, there is no single user you can block, no easy way to overcome it. #20: A buffer…

Words 934 - Pages 4

HSM 438 WEEK 2 PAPER CYBERTERRORISM

Countries around the globe are using cyber-warfare as a way to gain valuable information and spy on one another. In 2007 a denial of service attack on the country of Estonia is one example of the damage and negative effects of cyber warfare. “The Estonian attacks began at the end of April 2007, and demonstrated quite profoundly how widely distributed and loosely coordinated denial-of service attacks could affect an entire nation. Initially, only Estonian governmental computer systems were attacked, which…

Words 1218 - Pages 5

Susan Haymaker Case Study

his refugee detail, cases had to be reassigned to other officers to ensure timely completions. However, most of these cases had fraud issues that required more processing time to prepare NOIDs and denials. Representing the Agency: Officer Haymaker reflects a positive and professional image for the service. She provides motivating speeches during naturalization ceremonies. She volunteered and was selected for a six-week refugee detail to Turkey due to her previous Asylum work experience. She was given…

Words 798 - Pages 4

quiz1 Information Security Essay

Score for this quiz: 86 out of 90 Submitted Jul 13 at 1:15pm This attempt took 11 minutes. Question 1 4 / 4 pts ____ was the first operating system to integrate security as its core functions. UNIX DOX Correct! MULTICS ARPANET Question 2 4 / 4 pts ____ security addresses the issues necessary to protect the tangible items, objects, or areas of an organization from unauthorized access and misuse. Correct! Physical Personal Object Standard Question 3 4 / 4 pts A(n)…

Words 814 - Pages 4

Anonymous Group Essay

operations and messages. They are represented by a logo of a headless suited man, than instead of a head has a question mark. The group has become famous for its forms of hacktivism, including forms of social engineering, web defacement, distributed-denial-of-service attacks (DDoS), and malware software. They are known to release videos using Guy Fawkes masks, a mask popularized by the movie V…

Words 1598 - Pages 7

Ehr Disadvantages

management and billing implementation services. The monthly cost for our 15 providers at $449 each equals $6,735.00. In addition, we will be paying them 2.9% of whatever accounts receivable was paid that month. The yearly total will be $80,820.00 plus the 2.9%. Our checks come directly to us and not ECW. ECW processes insurances claims by using national rules and criteria so we will always be compliant. The 2.9% ECW charges is low compared to other billing services; which can charge up to 12%. ECW…

Words 671 - Pages 3

Assignment 2: TRICARE

Assignment 08 TRICARE or what started out as CHAMPUS, stands for the Civilian Health and Medical Program of the Uniformed services and was established under public law, in 1966. TRICARE was developed on people in the armed forces having a difficult time paying for any medical attention they needed for their families. There now are seven different types of TRICARE coverage including standard, prime, senior prime, extra, young adult, reserve select and reserved retired. Members of TRICARE insurance…

Words 1936 - Pages 8

Craigslist Crimes

category 2 crime? Category 1 “includes crimes where the target is the computer. For crimes where the computer is the target, a perpetrator” (Maras, 2012). There are many examples of this, some of them are… • Hacking and cracking • Denial of service • Distributed denial of service • Computer virus • Computer worms • Trojan horse • Spyware • Sniffers • Botnets Category 2 is “computers are tools with which to commit a crime” (Maras, 2012). Some of these can be… • Copyright infringement • Embezzlement • Phishing…

Words 650 - Pages 3

Issc362 Quiz 1 Essay

occurrence of some predetermined data, time, or event? | | A.Logic bomb | | | B.Trojan horse | | | C.Cracker | | | D.Denial of service (DoS) attack | | Answer Key: A | | | Question 2 of 20 | 5.0 Points | Denial of service (DoS) and distributed denial of service (DDoS) attacks have the same effect, however a distributed denial of service (DDos) attack: | | A.involves accessing a system of computers without authorization. | | | B.is launched from large numbers of hosts…

Words 912 - Pages 4

Public And Administrative Law: Legal Method And Process

they have. This practice was accepted as being justifiable and no one thought twice about it being prejudicial against individuals having medical problems. Some individuals, including Joe Q. Public, are only offered minimal coverage, excluding any services or procedures pertaining to their preexisting medical condition. This coverage is referred to as limited coverage and those receiving even limited coverage with a preexisting medical condition are lucky, as most people are denied coverage completely…

Words 1874 - Pages 8