Download to read offline
![Cyber-Security]shhsjjsjsjdjdjjddjjdjh.ppt](https://cdn.slidesharecdn.com/ss_thumbnails/cyber-security-20211013105857-240507130621-7a440293-thumbnail.jpg?width=640&height=640&fit=bounds)
L N Yadav Cyber SECURITY2.ppt
- 1. Cyber Security Awareness By Prof.Lovelesh Yadav Vice Principal HOD, CSE Dept. SSCET ,Bhadrawati Shri Sai College of Engineering & Technology ,Bhadrawati
- 2. Importance of CyberSecurity The Internet allows an attacker to work from anywhere on the planet. Risks caused by poor security knowledge and practice: Identity Theft Monetary Theft Legal Ramifications (for yourself and your organization) Sanctions or termination if policies are not followed According to the SANS Institute, the top vectors for vulnerabilities available to a cyber criminal are: Web Browser IM Clients Web Applications Excessive User Rights
- 3. Cyber Security isSafety • Security:We must protect our computers and data in the same way that we secure the doors to our homes. • Safety: We must behave in ways that protect us against risks and threats that come with technology.
- 4. False Sense ofSecurity?
- 5. What is aSecure System? (CIA Triad) Availability • Confidentiality – restrict access to authorized individuals • Integrity – data has not been altered in an unauthorized manner • Availability – information can be accessed and modified by authorized individuals in an appropriate timeframe
- 6. Threats and Vulnerabilities Threats:Any circumstances or events that can potentially harm an information system by destroying it, disclosing the information stored on the system, adversely modifying data, or making the system unavailable Vulnerabilities: Weakness in an information system or its components that could be exploited.
- 7. WHAT KINDS OF THREATS ARETHERE? Phishing and Spear- phishing Attacks Social Engineering Scams Common Malware and Ransomware Business Email Compromise Fake websites that steal data or infect devices And much more
- 8. Phishing Phishing refers tothe practice of creating fake emails or SMS that appear to come from someone you trust, such as: Bank, Credit Card Company, Popular Websites The email/SMS will ask you to “confirm your account details or your vendor’s account details”, and then direct you to a website that looks just like the real website, but whose sole purpose is for steal information. Of course, if you enter your information, a cybercriminal could use it to steal your identity and possible make fraudulent purchases with your money.
- 9.
- 10. Social Engineering When attemptingto steal information or a person’s identity, a hacker will often try to trick you into giving out sensitive information rather than breaking into your computer. Social Engineering can happen: Over the phone By text message Instant message Email
- 11. Malware = “malicioussoftware” Malware is any kind of unwanted software that is installed without your consent on your computer and other digital devices. Viruses, Worms, Trojan horses, Bombs, Spyware, Adware, Ransomware are subgroups of malware. Malware
- 12. A virus triesto infect a carrier, which in turn relies on the carrier to spread the virus around. A computer virus is a program that can replicate itself and spread from one computer to another. Viruses
- 13. Direct infection: viruscan infect files every time a user opens that specific infected program, document or file. Fast Infection: is when a virus infects any file that is accessed by the program that is infected. Slow infection: is when the virus infects any new or modified program, file or document. Great way to trick a antivirus program! Sparse Infection: is the process of randomly infecting files, etc. on the computer. RAM-resident infection: is when the infection buries itself in your Computer’s Random Access Memory. Viruses cont.
- 14. Logic Bombs: isprogramming code that is designed to execute or explode when a certain condition is reached. Bombs
- 15. Trojan horse: isa program or software designed to look like a useful or legitimate file. Once the program is installed and opened it steals information or deletes data. Trojan horses compared to other types of malware is that it usually runs only once and then is done functioning. Some create back-door effects Another distribution of Trojans is by infecting a server that hosts websites. Downfall of Trojans: very reliant on the user. Trojans
- 16. Worms and virusesget interchanged commonly in the media. In reality a worm is more dangerous than a virus. User Propagation vs. Self Propagation Worm is designed to replicate itself and disperse throughout the user’s network. Email Worms and Internet Worms are the two most common worm. Worms
- 17. Email worm goesinto a user’s contact/address book and chooses every user in that contact list. It then copies itself and puts itself into an attachment; then the user will open the attachment and the process will start over again! Example: I LOVE YOU WORM Email Worm
- 18. An Internet Wormis designed to be conspicuous to the user. The worms scans the computer for open internet ports that the worm can download itself into the computer. Once inside the computer the worms scans the internet to infect more computers. Internet Worms
- 19. Identity Theft Impersonation byprivate information Thief can ‘become’ the victim Reported incidents rising Methods of stealing information Shoulder surfing Snagging Dumpster diving Social engineering High-tech methods Identity Theft
- 20. Denial of ServiceAttack
- 21. Ransomware Ransomware is atype of malware that restricts your access to systems and files, typically by encryption and then demands a ransom to restore access.
- 22.
- 23. Cyber Crime Cyber Crimeis a generic term that refers to all criminal activities done using the medium of communication devices, computers, mobile phones, tablets etc. It can be categorized in three ways: •The computer as a target – attacking the computers of others. •The computer as a weapon- Using a computer to commit “traditional crime” that we see in the physical world. •The computer as an accessory- Using a computer as a “fancy filing cabinet” to store illegal or stolen information.
- 24. CASES in INDIAby Economics Times India witnessed 13.91 Lakh cyber security incidents in 2022, Minister of State for Electronics and Information and Technology Rajeev Chandrasekhar informed the Parliament on Friday (February 10). A recent cyber attack in India in 2018 was deployed on Cosmos Bank in Pune. This daring attack shook the whole banking sector of India when hackers siphoned off Rs. 94.42 crores from Cosmos Cooperative Bank Ltd. in Pune.
- 28. Financial (theft, fraud, blackmail) Political/State(state level/military) Fame/Kudos (fun/status) Hacktivism (cause) Pen Testers (legal hacking) Police Insider Hacking Business
- 29. Which hat youwant to wear?
- 30. Attacks today areAUTOMATED! It’s not some dude sitting at his hacker desk all day typing out ping commands to IP addresses via the command prompt manually…
- 31. What does aCyber Security Professional look like?
- 32. What does aCyber Security Professional look like?
- 33. WHAT IS FOOTPRINTING? Definition:the gathering of information about a potential system or network (the fine art of gathering target information) a.k.a. fingerprinting Attacker’s point of view Identify potential target systems Identify which types of attacks may be useful on target systems Defender’s point of view Know available tools May be able to tell if system is being footprinted, be more prepared for possible attack Vulnerability analysis: know what information you’re giving away, what weaknesses you have
- 34. WHAT IS FOOTPRINTING? System(Local or Remote) IP Address, Name and Domain Operating System Type (Windows, Linux, Solaris, Mac) Version (XP/Vista/7/10, Redhat, Fedora, SuSe, Ubuntu, OS X) Usernames (and their passwords) File structure Open Ports (what services/programs are running on the system) Networks / Enterprises System information for all hosts Network topology Gateways Firewalls Overall topology Network traffic information Specialized servers Web, Database, FTP, Email, etc. Social Media
- 35. Types of VulnerabilityScanner Port scanner Network vulnerability scanner Web application security scanner Database security scanner. Host based vulnerability scanner ERP security scanner. Single vulnerability tests.
- 36. Virus Detection • SimpleAnti-virus Scanners – Look for signatures (fragments of known virus code) – Heuristics for recognizing code associated with viruses • Example: polymorphic viruses often use decryption loops – Integrity checking to detect file modifications – Keep track of file sizes, checksums, keyed HMACs of contents • Generic decryption and emulation – Emulate CPU execution for a few hundred instructions, recognize known virus body after it has been decrypted – Does not work very well against viruses with mutating bodies and viruses not located near beginning of infected executable
- 37. Summary • Cybersecurity willrequire a significant workforce with deep domain knowledge. • Almost everything is hooked up to the internet in some sort of form. • Recent events have widened the eyes of many security experts. • The ability to gain access to high security organizations, infrastructures or mainframes has frightened many people. • Could one click of the mouse start World War III?