uCertify Articles » Security+ http://www.ucertify.com/article Just another WordPress weblog Wed, 04 Nov 2009 00:00:00 +0000 http://wordpress.org/?v=2.8.4 en hourly 1 Detecting and Preventing Social Engineering and other Hacking Processes http://www.ucertify.com/article/detecting-and-preventing-social-engineering-and-other-hacking-processes.html http://www.ucertify.com/article/detecting-and-preventing-social-engineering-and-other-hacking-processes.html#comments Mon, 31 Aug 2009 00:00:00 +0000 uCertify 4201040

Social engineering attacks are growing fast, and today majority of attackers use social engineering techniques to infiltrate into a victim’s network. It is very difficult for a technician to identify social engineering attacks, as these attacks do not involve any technical tools or any software-coding program. A social engineering hacker attempts to persuade users to provide information that will enable him to use their computers or computer resources. Many technicians think that such attacks are a cause of concern only for large organizations. It used to be the case earlier, but now hackers target all sectors.

Social engineering attacks succeed because they are allowed to succeed, i.e., in most cases the fraud could have been avoided if the victim had not provided the information that the hacker tried to extract. Getting information through social engineering methods is easier than making complicated code, and the information that a hacker gets through social engineering is correct and more reliable. To secure users from social engineering attacks as well as other attacks, you need to know what type of attacks they might fall victim to from social engineering hackers or any other Technical hacker. You should also try to find out what a hacker wants and calculate the possible loss to your organization. Accordingly, the security policy of the company should be reviewed and preventive measures should be taken. The changing must include educating your employees so that they can recognize the situations of social engineering and react swiftly. This helps others not to get affected by the same procedure or cheated by the same person again. The social engineering hacker might use various tricks to persuade his victim to reveal vital information. Depending upon the mental ability of the victim, he judges and applies his techniques while interacting with him.

The simplest way of social engineering hacking is to ask for the information directly from the victim. Seems easy? Yes it is. The only thing an attacker needs is presence of mind. A social engineering hacker can be anyone. Even your boss or manager can call you and ask for your login ID and Password, or it might be the technician who is offering you help. Users can also be attacked through fake e-mails, which might lead them to open a Web site designed to trick the recipients in giving important information such as usernames, passwords or addresses. This trick is also very popular with technical hackers, but instead of sending e-mails, they persuade victims to visit Web sites, which contain scripts that deploy Trojan virus or Key-loggers to the victims’ computers. Nowadays hackers also use mouse loggers and screen grabbers to obtain vital information. Organizations should take proper steps to educate their employees about different social engineering techniques.

Some other common types of attacks that hackers adopt are as follows:

Types of attacks

  • Back Door:
  • Spoofing:
  • Denial-of-Service (DoS):
  • Password Guessing Attack:
  • Replay Attack:

These days organizations have to upgrade their security to protect crucial information, and in the same way hackers are also developing more sophisticated techniques of attack. At the end of this article you have learnt about various social engineering techniques and steps to be taken to prevent such attacks from taking place.

Share/Bookmark]]> http://www.ucertify.com/article/detecting-and-preventing-social-engineering-and-other-hacking-processes.html/feed 0 What is NTLM version 2? http://www.ucertify.com/article/what-is-ntlm-version-2-2.html http://www.ucertify.com/article/what-is-ntlm-version-2-2.html#comments Fri, 28 Aug 2009 00:00:00 +0000 uCertify 1401372

NTLM version 2 is an enhanced and most secure form of challenge/response authentication. NTLM version 2 uses 128-bit encryption. It significantly improves both the authentication and session security mechanisms. NTLM 2 has been available for Windows NT 4.0 since Service Pack 4 (SP4) was released, and it is supported natively in Windows 2000 and Windows 2003 operating systems. All client operating systems developed by Microsoft after Windows 2000 Professional support NTLM version 2. NTLM 2 support can be added to Windows 95 and Windows 98 by installing the Directory Services Client.

Share/Bookmark]]> http://www.ucertify.com/article/what-is-ntlm-version-2-2.html/feed 0 What is active detection? http://www.ucertify.com/article/what-is-active-detection-2.html http://www.ucertify.com/article/what-is-active-detection-2.html#comments Wed, 19 Aug 2009 00:00:00 +0000 uCertify 1301138

Active detection is a type of intruder detection in which a system takes automatic actions when it recognizes an attack. It can terminate unauthorized connections, processes, or sessions. Active detection can also launch a counterattack against an intruder.

Share/Bookmark]]> http://www.ucertify.com/article/what-is-active-detection-2.html/feed 0 What is encryption? http://www.ucertify.com/article/what-is-encryption_5610171.html http://www.ucertify.com/article/what-is-encryption_5610171.html#comments Fri, 17 Jul 2009 00:00:00 +0000 uCertify 5610171 Pass CompTIA security-plus - Security+ -->

Encryption is the process of conversion of data into a form that cannot be easily understood by unauthorized persons. The encrypted data is known as cipher text. The cipher text can be converted back into its original form by a process known as decryption. Decryption is the reverse process of encryption.

Pass Microsoft 77-601 - MCAS: Microsoft Office Word 2007 Get certified in first attempt download BR0-001 - Security+ Bridge Exam simulation. Share/Bookmark]]> http://www.ucertify.com/article/what-is-encryption_5610171.html/feed 0 What is blowfish? http://www.ucertify.com/article/what-is-blowfish.html http://www.ucertify.com/article/what-is-blowfish.html#comments Sun, 12 Jul 2009 00:00:00 +0000 uCertify 5610254

Blowfish is a symmetric 64-bit block cipher that can support key lengths up to 448 bits. It is included in a large number of cipher suites and encryption products. It was designed in 1993 by Bruce Schneier and is freely available for anyone to use. This has contributed to its popularity in cryptographic software.

Share/Bookmark]]> http://www.ucertify.com/article/what-is-blowfish.html/feed 0 What is a vulnerability attack? http://www.ucertify.com/article/what-is-a-vulnerability-attack.html http://www.ucertify.com/article/what-is-a-vulnerability-attack.html#comments Fri, 10 Jul 2009 00:00:00 +0000 uCertify 1401664

A vulnerability attack takes advantage of the vulnerabilities in an operating system or software service by entering the operating system and disrupting its working. The best way to counter such attacks is to keep the operating system updated with latest service packs and updates.

Share/Bookmark]]> http://www.ucertify.com/article/what-is-a-vulnerability-attack.html/feed 0 What is ICMP? http://www.ucertify.com/article/what-is-icmp.html http://www.ucertify.com/article/what-is-icmp.html#comments Wed, 08 Jul 2009 00:00:00 +0000 uCertify 1401418

Internet Control Message Protocol (ICMP) is an integral part of IP. It is used to report an error in datagram processing. The Internet Protocol (IP) is used for host-to-host datagram service in a network. The network is configured with connecting devices called gateways. When an error occurs in datagram processing, gateways or destination hosts report the error to the source hosts through the ICMP protocol. The ICMP messages are sent in various situations, such as when a datagram cannot reach its destination, when the gateway cannot direct the host to send traffic on a shorter route, when the gateway does not have the buffering capacity, etc.

Share/Bookmark]]> http://www.ucertify.com/article/what-is-icmp.html/feed 0 What is NTLM version 2? http://www.ucertify.com/article/what-is-ntlm-version-2.html http://www.ucertify.com/article/what-is-ntlm-version-2.html#comments Fri, 03 Jul 2009 00:00:00 +0000 uCertify 1401372

NTLM version 2 is an enhanced and most secure form of challenge/response authentication. NTLM version 2 uses 128-bit encryption. It significantly improves both the authentication and session security mechanisms. NTLM 2 has been available for Windows NT 4.0 since Service Pack 4 (SP4) was released, and it is supported natively in Windows 2000 and Windows 2003 operating systems. All client operating systems developed by Microsoft after Windows 2000 Professional support NTLM version 2. NTLM 2 support can be added to Windows 95 and Windows 98 by installing the Directory Services Client.

Share/Bookmark]]> http://www.ucertify.com/article/what-is-ntlm-version-2.html/feed 0 What is Kerberos v5? http://www.ucertify.com/article/what-is-kerberos-v5.html http://www.ucertify.com/article/what-is-kerberos-v5.html#comments Fri, 26 Jun 2009 00:00:00 +0000 uCertify 1401349

Kerberos v5 is an authentication method used by Windows operating systems to authenticate users and network services. Windows 2000/2003 and XP clients and servers use Kerberos v5 as the default authentication method. Kerberos has replaced the NT LAN Manager (NTLM) authentication method, which was less secure. Kerberos uses mutual authentication to verify both the identity of the user and network services. The Kerberos authentication process is transparent to the users.

Note: Kerberos v5 is not supported on Windows XP Home clients or on any clients that are not members of an Active Directory domain.

Share/Bookmark]]> http://www.ucertify.com/article/what-is-kerberos-v5.html/feed 0 What is active detection? http://www.ucertify.com/article/what-is-active-detection.html http://www.ucertify.com/article/what-is-active-detection.html#comments Thu, 25 Jun 2009 00:00:00 +0000 uCertify 1301138

Active detection is a type of intruder detection in which a system takes automatic actions when it recognizes an attack. It can terminate unauthorized connections, processes, or sessions. Active detection can also launch a counterattack against an intruder.

Share/Bookmark]]> http://www.ucertify.com/article/what-is-active-detection.html/feed 0