Network Security

Network Security

Protecting information and systems is essential for individuals and organizations. Cyber threats target weaknesses in software, networks, and human behavior, making security a top priority. Understanding these risks and taking preventive measures helps ensure data safety and system integrity. This paper will examine security vulnerabilities and phishing, the impact it has, and strategies used to reduce their risks.

Ping Command Attacks

The ping command is a diagnostic tool used to test network connectivity. However, it can be used for other purposes, leading to cyberattacks such as ping flood attacks and ping of death attacks. Ping flood attacks, also known as ICMP flood, is a Distributed Denial of Service (DDOS) attack that overwhelms a target with internet traffic, such as pings, to make it inaccessible. In order for a ping flood attack to work, the attacker needs to know the IP address of the recipient device and have more network bandwidth than the target network. Ping of death is a DDOS attack in which the attacker sends the recipient device simple ping requests as fragmented IP packets that are usually oversized causing it to crash or reboot. These attacks emphasize the importance of network security measures such as firewalls and intrusion detection systems to limit ICMP traffic and mitigate threats.

Why Computer Systems Are Vulnerable to Each Kind of Threat

Security holes and vulnerabilities exist in software, hardware, and network configurations, allowing attackers to exploit weaknesses and gain unauthorized access. Common sources of vulnerabilities include outdated software, poor system configurations, and human error. Employee negligence is also a factor, as people use weak passwords exposing themselves to hackers gaining access to sensitive data (Slonopas, 2024). Phishing attacks is the practice of tricking victims into revealing their confidential data through scam emails, text, or phone calls (Woollacott, 2024). Since phishing uses psychological attacks, technical defenses aren’t sufficient enough without the awareness of being attacked. The advancement of phishing techniques, such as spear phishing and smishing (SMS and phishing), makes detection even more challenging.

Symptoms and Damage That Each Breach Can Inflict After Compromising a System

When attackers exploit security holes and vulnerabilities, they can gain unauthorized access to networks, allowing them to steal confidential information. Once the attackers are inside the system, they can install malware, corrupt data, or even take full control of the compromised system. These types of breaches can cause significant operational disruptions, leading to downtime, financial losses, and damage to an organization's reputation. Phishing attacks can also have severe consequences. When attackers gain access to compromised accounts, they can manipulate sensitive information, conduct unauthorized transactions, or even gain access to more critical systems. Victims of phishing attacks may suffer substantial financial losses due to identity theft and unauthorized transactions. Additionally, organizations targeted by phishing attacks often experience reputational harm, resulting in a loss of customer trust and potential legal ramifications.

Two Recommendations for Protecting a Computer System or Network from Each Type of Security Breach

To reduce security vulnerabilities, organizations should keep all software and systems updated with the latest security patches. Automated patch management ensures timely updates, minimizing the risk of exploitation. Regular vulnerability assessments and penetration testing are also crucial in identifying and fixing weaknesses before they can be used against an organization. Ethical hackers can simulate cyberattacks to assess an organization’s security and provide recommendations for strengthening defenses.

To protect against phishing, companies should focus on educating users and increasing awareness. Training employees to identify phishing attempts and conducting phishing simulations help improve their ability to recognize malicious emails and links. In the military, we conduct training annually that allows us to improve our awareness of phishing attempts and cyber attacks. Additionally, implementing email security measures such as spam filters and multi-factor authentication, can help detect and block phishing attempts. Establishing strict policies for verifying sensitive requests can strengthen defenses against phishing attacks.

Cybersecurity threats like security vulnerabilities and phishing present serious risks to individuals and organizations. Regular system updates, vulnerability assessments, user training, and strong security measures can help prevent these attacks. Staying informed and proactive is key to protecting sensitive data and maintaining system security. 

References

Slonopas, A. (2024, February 29). Cybersecurity vulnerabilities: Do employees pose a risk?: American Public University. APU. https://www.apu.apus.edu/area-of-study/information-technology/resources/cybersecurity-vulnerabilities-do-employees-pose-a-risk/ 

What Is A Ping (ICMP) Flood DDOS Attack?. Radware Captcha Page. (n.d.-a). https://www.radware.com/security/ddos-knowledge-center/ddospedia/icmp-flood/ 

What is a Ping of Death (PoD) Attack. Radware Captcha Page. (n.d.-b). https://www.radware.com/security/ddos-knowledge-center/ddospedia/ping-of-death/

Woollacott, E. (2024, February 13). What is phishing? understanding cyber attacks. Forbes. https://www.forbes.com/sites/technology/article/what-is-phishing/