Kamikaze

Tips n Tricks

A Quick Introduction to Network Security Measures

by aadhu on Mar.13, 2009, under Computer Networking

Networking Security
The computer network is perhaps the most important system that is running within your company. Your network powers almost everything that the computers do – from daily essential tasks like email to surfing on the Internet, sharing documents, sharing printers, etc. So if your network happens to be down, the entire organization is greatly inconvenienced. Lots of man hours would be wasted. And if the network is down repeatedly, productivity will decline.

There are many reasons that may cause a network to be down. We are talking about network security issues here. Minor network security breaches involve attack on the personal workstation. For example, a workstation may be infested with viruses or spyware. Viruses and spyware are types are software that operate mostly in the background. They are usually installed on the computers without the permission of the user and perform malicious operations such as hijacking browsers or wiping out hard disk drive data.

More serious network security breaches involve real time attack on the servers. As the servers power many important functions of the network (e.g. sending or receiving email, or storing confidential company data), the consequences are disastrous if servers have been compromised. The general term for server attacks is known as “intrusion”.

Earlier, we have briefly discussed how a personal workstation can be compromised by viruses or spyware. This is also a form of intrusion on the personal computer. This form of intrusion is usually passive. In other words, it may involve some action from the user in order for the software to be installed. For instance, the user may be browsing malicious websites, or an individual may have installed a virus accidentally, thinking that it was an innocent game.

Another form of active, which is an active form of attack, involves sending packets of data to a server until the server slows down to a crawl, thus rendering it useless. This is also known as denial of service (DDOS) attacks. The servers won’t be able to process requests sent to them until these malicious packets of data are somehow blocked. Otherwise, the whole network continues to be malfunctioning.

These are all various ways that a network can be compromised. From innocent little games to aggressive data packet attacks. Fortunately, there are network security solutions available that will help safeguard the network.

There are many different levels of network security. For security engineers, the challenge is always to decide on adequate protection without inconveniencing the users. Users may be inconvenienced when security hardware or software starts to interfere with other applications. For instance, the newly installed Firewall may be preventing some software from accessing the Internet.

A comprehensive network security program involves hardware and software security, as well as a sound educational program for the users. Users must be trained so that they know what to do. A firewall can only be used to block so many websites. Ultimately, it’s up to the users to exercise discretion when surfing dubious websites.

Always consult network security professionals to explore various options before implementing a network security plan.



By: Gen Wright
Leave a Comment :, , more...

Tips for Network Security

by aadhu on Mar.13, 2009, under Computer Networking

Networking Security
Network in nowadays give us possibilities communicate and do more other things possible and much faster. But not everything is so nice how we thing in first moment. There are a lot of threats which grow up every day in networking!

Here are 10 information security awareness tips for network security, which helps to do network and communication via this network safer, and also give to you confidence that everything is O.K.

1.Use strong password.

Passwords are the simplest form of security. By leaving passwords blank or simple (i.e., password or admin), unauthorized users are practically invited to view sensitive data. Passwords are more secure when they contain letters,numbers and special characters in a combination of upper-case and lower-case characters, and they should be changed periodically.

2.Educate users.

Users need to know exactly what kinds of threats they can expect using e-mail, making faceless downloads and open unknown attachments. Uneducated computer users are often those who fall victim to viruses, spyware, and phishing attacks, all of which are designed to corrupt systems or leak personal information to a third party without the user\’s consent. The best way hot to make this education is to do special information security awareness training which provides some companies, for example, InfoSecurityLab.

3.Make backup copies.

Indulence is one of the biggest security threats. It\’s considerably more difficult to completely re-create a crippled system than it is to take the time to create proper backups. Create backups often, and do not immediately overwrite them with the next set of backups. In addition, make copies and keep them off-site in case of emergency.

4.Use protection software.

Without protection software information is like a hedgehog on the motorway-everyone can get this information and \”smash\” it! Ideally, network protection software should include virus protection, multiple spyware scanners, and a program that runs in the background to prevent malicious software from ever being installed.

5.Do regullary updates

Every day there are created new computer viruses and malicious softwares, so, what good are all those virus and spyware scanners if they\’re not updated? It\’s crucial to update what are called the \”virus/spyware definitions\” every week. This keeps the scanners up-to-date to detect the latest malicious software.

6.Install security patches

Security holes may exist in every operating system. There is no software which is perfect. Once an imperfection or hole is found, it\’s usually exploited within a very short period of time. Therefore, it is imperative to install security patches as soon as possible because otherwise you let these holes open for worms, trojan horses and other viruses.

7.Don\’t be creduloud

Ads on the Internet have become devious and deceptive. They now appear as \”urgent system messages\” and warnings designed to scare users into clicking. As a rule of thumb, if a popup window contains an ad claiming to end popups, chances are it\’s a scam of some sort.

8.Use encryption

Encryption is a way of coding the information in a file or e-mail message so that if it is intercepted by a third party as it travels over a network it cannot be read. Encryption is especially important when dealing with banking and credit cards. Storing and transferring unencrypted data is the equivalent of posting that data for everyone to see. If you\’re not comfortable implementing encryption technology, ask IT specialist assist you.

9.Trust proffesional service

Don\’t try to do all yourself, you can\’t be professional in every area. Setting up a network, applying proper security measures, and downloading and installing software can be tricky. Large companies have IT departments. Small business owners should also ask for advice or even hire help.

10.Proper instruction.

Security measures are most effective if everyone is aware of how the system operates. Better are inform all employies how security system work and what to do if something goes wrong! These tips is not so difficult make in life, but they can really increase your network and information security. Do networking safe or not – it\’s up to you!



By: InfoSecurityLab
Leave a Comment :, , more...

A Small Business Network Security Survey

by aadhu on Mar.12, 2009, under Computer Networking

Networking Security
Many of today’s small businesses use PCs and a server network to facilitate their operations. Important company information is stored in electronic format on these networks, and daily operations are dependent on the network being both available and secure. In many cases, these small businesses ignore or are unaware of the risks that could compromise the safety of the data. To better understand these issues, two hundred of these small businesses were interviewed about their network security. Companies ranged from those with ten employees or less, to those with over a hundred staff members.

Over half of the survey respondents believed that their network was adequately safe or very secure. A large number of respondents did admit that they doubted their defenses against an attack. This isn’t too surprising, as nearly all businesses have experienced some type of security threat in the last year, from lost computers or back-up takes, hacker attacks, viruses, or theft by employees.

The top three threats reported were:

1) Trojan horse or virus attacks

2) Stolen or lost computers, including data storage devices

3) Employee theft or hacker attack

Company defenses reported include:

1) Virus Protection

2) Firewall

3) Spyware Protection

4) Spam Filters

Recommendations:

Most companies reported that they lacked a smart password policy, automated patch management, and employee network use policies. Generally, many of these businesses don’t have full protection against an attack, and have not yet had to put their defenses to the test.

There isn’t one single fix to ensure secure continuity of operations on a network. However, we recommend a layered approach in managing these pressing security threats. This layered approach examines vulnerability in different areas including hardware, software, processes, and training. Every layer added another level of protection to the information environment.

1) Blocking network-based attacks

2) Blocking host-based attacks

3) Eliminating vulnerability

4) Supporting authorized users safely

5) Tools for maximizing effectiveness and minimizing losses

To assure the continuity of your business operations, regular testing of these security measures is required.

Level of Overall Security:

Over half the respondents stated that they thought their network was secure enough or better. 30% of the remainder thought their network was only somewhat secure, and over 10% confided that their network was not as secure as it should be.

These small businesses tend to believe that their network is relatively secure: 63% of businesses with less than ten employees and almost 75% of those with between eleven and twenty-five staff members. The larger companies were not as sure of their defenses, with over half of those with fifty to one hundred and 44% of those with over a hundred employees felt secure or secure enough. In the fifty-one to one hundred staff category, over 20% reported that the network was not as secure as should be. In general, the bigger the company, the larger the network – and the greater the number of security risks it must defend against.

Experienced Threats:

The respondents reported on security lapses or attacks that they’d experienced over the last year. The survey showed that Trojan horses or virus attacks are the most common threat to the network, with about half reporting experiences with these issues in that time. The larger companies reported at 40%, the lowest rate, which is indicative of better defenses. Over 60% of the smallest companies reported virus-based attacks.

Loss of company information from theft or loss of storage devices appeared to be a minor threat for smaller companies, but this risk increases with company size. Over 33% of the larger firms reported this sort of experience. Hacker attacks were most often experienced by firms with less than ten employees and those with over a hundred. It seems the smaller networks are more vulnerable, and the largest ones are high-profile, with a greater chance of becoming a target. Unfortunately, staff members can create a security risk themselves; about 10% of businesses reported that they had experienced unauthorized access or theft in the allotted time frame.

Devices and Procedures:

Good procedures, processes and systems can help defend against security threats. In the survey, respondents were asked which security methods were in use. Most reported that they had virus protection and firewalls. Around 25% lacked spam filters and spyware removal, leaving networks open to malware which ranges from dangerous to annoying. Under 50% have patch management or a smart password policy in place. This smart password system uses passwords with a mixture of normal and special characters which are frequently changed.

As compared to the largest companies surveyed, smaller businesses are less-often implementing network use policies for employees. Over 80% of the larger companies have defined guidelines for proper and improper network use. These guidelines attempt to lower the amount of network activity unrelated to the business, which result in increased security risk. Many of the respondents use wireless networks. Wireless networks are some of the most vulnerable access points if not well-secured. Only a few companies reported that they use all the top-priority security measures listed in the survey.

Testing:

No security device or feature can be known to provide real defense until it’s been tested. Anti-virus specifications could be out of date, a hole could exist within a firewall, or staff members could not be using the correct practices for a safe and secure network. About 25% of respondents indicated that either they couldn’t remember the last time they tested their security, or didn’t know that they ever had. This seems to indicate that while many have implemented security defenses, they can’t be assured that the expected protection is actually provided.

The very smallest companies least-often tested their security measures. About 10% of businesses had tested security, but not for over a year. As the threats change over time, dangerous lapses can occur without periodic testing. Around 33% of respondents reported that they’d tested their security measures within the last month. Validation of network security elements on a regular basis is important to system integrity in an overall continuity plan. It is unfortunate that usually a company only examines its level of exposure after a damaging event which negatively affects the business.



By: Nick Pegley
Leave a Comment :, , more...

Network security audit and monitoring

by aadhu on Mar.10, 2009, under Computer Networking

Networking Security
Network security requires constant care and monitoring. With Nsauditor Network Security Auditor, Systems Administrators are able to gather a wide range of information from all the computers in the network without installing server-side applications on these computers. It is a multi-purpose tool designed to scan networks and hosts for vulnerabilities, and to provide security alerts.

Nsauditor Network Security Auditor significantly reduces the total cost of network management in enterprise environments by enabling IT personnel to audit and monitor remote network computers for possible vulnerabilities. The software network auditor module checks network for all potential methods that a hacker might use to attack it, discovers network services and checks them for vulnerabilities.

Nsauditor is a complete networking utilities package ( more than 45 network tools in one ) that includes a wide range of tools for network auditing, scanning and monitoring. The product contains a built-in database of known network security vulnerabilities, which allows you to select the items for scanning and add custom entries. Nsauditor can discover NetBios names, audit MS SQL servers, scan for common Adware traces, discover services, devices, processes, installed applications, disks, shared resources, hardware resources, users, local groups and much more. Nsauditor Network Security Auditor has a centralized network monitoring interface, which allows to monitor the entire network from a single computer.

Nsauditor Network Monitoring module shows you detailed listings of all TCP and UDP endpoints on your system, including the owning process name, remote address and state of TCP connections, country of origin and service name/description. When you start Nsauditor it will enumerate all active TCP and UDP endpoints, resolving all IP addresses to their domain name versions. You can close established TCP/IP connections by right-clicking on a connection and/or request IP address whois information or trace route.

Nsauditor “Adware Scanner” tool scans network computers for common Adware traces. Adware Scanner searches system registry and gives you a quick look at the Adware, malware and spyware installed on your computer or in the range of network computers. Using colored icons Adware Scanner shows harmful objects.

Removable devices create additional challenges for network security protection. Portable storage devices can be used both to download confidential data as well as to introduce a virus into the company network. Nsauditor Network Security Auditor “Removable Explorer” tool gives IT staff more control over unauthorized and dangerous removable devices ( USB device, CD-Rom and DVD ) by allowing them to scan the network for all removable devices that are connected to any one of the network computers. Removable Explorer displays remote network computer USB devices, CD-Rom, DVD drive or other removable storage device information and state, drive type, first and last plug in time, serial number, revision, device name, device vendor and more.

Nsauditor performs event log based intrusion detection, monitors the security event logs of Windows 2000/XP/2003 servers or workstations and notifies of the possible intrusions/attacks by using E-mail, Net Send, Speech Recognition method or by playing user selected voice file.

In summary, Nsauditor Network Security Auditor is a very complete network tools package for a surprisingly low price.

Application Info: http://www.nsauditor.com/downloads/index.html

Application Screenshot: http://www.nsauditor.com/images/screens/nm1.jpg

Download URL: http://www.nsauditor.com/downloads/nsauditor_setup.exe

About Nsasoft

Nsasoft is a provider of Network Information and Security Utilities. Nsauditor Network Security Auditor, BlueAuditor, ShareAlarmPro and SpotAuditor are used at thousands of companies and organizations. Nsauditor Network Security Auditor is one of the most widely used Network Security Audit and Information Utilities. Nsasoft offers Network security software for remote network monitoring and management, network status and performance monitoring, computer protection and internet security systems. For more information about Nsasoft, visit http://www.nsauditor.com



By: Varuzhan Kankanyan
Leave a Comment :, , more...

Why Network Security Needs Network Analyzer Software?

by aadhu on Mar.10, 2009, under Computer Networking

Networking Security
Every computer network that is connected to the internet and worldwide web is highly vulnerable to security threats, hacking, unauthorized entries, data integrity issues and data loss. There are number of ways how intruders can sneak into your network and steal your data, misuse or manipulate the data. Most often, these intruders have sophisticated applications to steal the data from your network without your knowledge. No organization can compromise on data security because it is the lifeline of all organizations. At times there can be sensitive data pertaining to third parties including customer data.

As intruders operate in stealth mode, there is no way we can notice their intrusion and it requires proper security initiatives to keep them off your network. If you have proper tools that monitor your network 24/7, you will be able to identify hacking attempts and will be able to secure your network at the right before any possible data loss. One of the best ways of ensuring network security is to install a network analyzer in your network.

Reliable network analyzer software such as COLASOFT Packet Sniffer will be able to give your network the needed security. The network analyzer that you install will keep a close watch on all network conversations with the external world. All the data that comes in and goes out of your network will be closely monitored. At any given point, you will able to know how your network resources and bandwidth are utilized. If there is any unusual traffic or activities as a security manager you will be able to easily spot the issues. Every security manager should be aware of the nature of traffic in their network during different times of the day and the regular traffic pattern. You will be able to get this information from a reliable network analyzer. When the network traffic changes drastically or deviates from the regular pattern then it gives you a good reason to suspect of undesirable activities within your network.

Therefore, even when the intruders operate in stealth mode, the abnormal activity within the network will be easily spotted by the network analyzer. The network security manager can set various criteria and parameters using the tool that monitors the network so that timely attention is given even at the slightest suspicion. Without a network analyzer, we will neither know our network’s regular traffic pattern nor will we know whenever there are undesirable background activities.

Using a reliable network analyzer such as COLASOFT Packet Sniffer, you will be able to record all network events, which gives you a total control over your network. You will be able to keep track of all HTTP requests, Email messages, FTP data transfers, DNS requests and instant messenger activities. This covers every aspect of your network’s activities. At times, the intruders may even use your network to send spam mails without your knowledge, if you have a network analyzer you will be able to keep a tab on the data transfer. You will be able to spot instantly any unauthorized data transfer. Therefore, using network analyzer tool enhances the security of your network. Visit COLASOFT.com to get more information on reliable network analyzer tools for your network.

About COLASOFT

Ever since 2001, COLASOFT has been dedicated in providing all-in-one and easy-to-use network analysis software for customers to monitor, analyze, and troubleshoot their network. Up to now, more than 4000 customers in over 70 countries trust the flagship product – Capsa as their network monitoring and troubleshooting solution. The company also offers four free network utilities: COLASOFT Packet Builder, COLASOFT Packet Player, COLASOFT MAC Scanner, and COLASOFT Ping Tool. Learn more today at http://www.COLASOFT.com/



By: Robert
Leave a Comment :, , more...

Looking for something?

Use the form below to search the site:

Still not finding what you're looking for? Drop a comment on a post or contact us so we can take care of it!