Computer System Security(CSS)

KNC - 301

Presented By
Mr. Meharban Ali
 What is computer Security
• Computer network security consists of measures
taken by business or some organizations .
• It monitors and prevent unauthorized access from
the outside attackers.
• Network Administrator controls access to the data
and software on the network.
• A network administrator assigns the user ID and
password to the authorized person.
 Aspects of Network Security:

Aspects of Network Security:

 Privacy:
•  Privacy means both the sender and the
receiver expects confidentiality.
• The transmitted message should be sent
only to the intended receiver while the
message should be opaque for other users.
• Only the sender and receiver should be
able to understand the transmitted message
as eavesdroppers can intercept the message.
 Continued

.Therefore, there is a requirement to encrypt the

message so that the message cannot be
intercepted.
.This aspect of confidentiality is commonly
used to achieve secure communication.
 Encryption:
• Encryption: Encryption means that the sender
converts the original information into another
form and sends the unintelligible message over
the network.
 Decryption:
• Decryption: Decryption reverses the
Encryption process in order to transform the
message back to the original form.
• The data which is to be encrypted at the sender
site is known as plaintext, and the encrypted
data is known as ciphertext. The data is
decrypted at the receiver site.
 Encryption/Decryption techniques:

• Privacy with secret key Encryption/Decryption

• Privacy with public keyEncryption/Decryption
Continued
Privacy with secret key Encryption/Decryption
Privacy with public key Encryption/Decryption
 Message Integrity:
• Message Integrity: Data integrity means that
the data must arrive at the receiver exactly as it
was sent.
• There must be no changes in the data content
during transmission, either maliciously or
accident, in a transit.
• As there are more and more monetary
exchanges over the internet, data integrity is
more crucial.
 Continued
• The data integrity must be preserved for secure
communication
 End-point authentication:
• End-point authentication: Authentication
means that the receiver is sure of the sender’s
identity, i.e., no fraud has sent the message.
 Non-Repudiation:
• Non-Repudiation: Non-Repudiation means
that the receiver must be able to prove that the
received message has come from a specific
sender.
• The sender must not deny sending a message
that he or she send. The burden of proving the
identity comes on the receiver.
 Continued
For example
• if a customer sends a request to transfer the
money from one account to another account,
then the bank must have a proof that the
customer has requested for the transaction.
 Types of Cyber Attacks
• A cyber-attack is an exploitation of computer
systems and networks. It uses malicious code
to alter computer code, logic or data and lead
to cybercrimes, such as information and
identity theft
Cyber-attacks can be classified into the
following categories:
 Web-based attacks

• These are the attacks which occur on a website

or web applications. Some of the important
web-based attacks are as follows
 Continued
• 1. Injection attacks
• It is the attack in which some data will be
injected into a web application to manipulate
the application and fetch the required
information.
• Example- SQL Injection, code Injection, log
Injection, XML Injection etc
 Continued
• 2. DNS Spoofing
• DNS Spoofing is a type of computer security hacking.
Whereby a data is introduced into a DNS resolver's
cache causing the name server to return an incorrect IP
address
• Diverting traffic to the attacker’s computer or any
other computer.
• The DNS spoofing attacks can go on for a long period
of time without being detected and can cause serious
security issues.
 Continued
3. Session Hijacking
• It is a security attack on a user session over a
protected network.
• Web applications create cookies to store the
state and user sessions.
• By stealing the cookies, an attacker can have
access to all of the user data.
 Continued
• Phishing
• It is a type of attack which attempts to steal
sensitive information like user login
credentials and credit card number.
• It occurs when an attacker is masquerading as
a trustworthy entity in electronic
communication.
 Continued
5. Brute force :-
• It is a type of attack which uses a trial and error
method.
• This attack generates a large number of guesses
and validates them to obtain actual data like user
password and personal identification number.
This attack may be used by criminals to crack
encrypted data, or by security, analysts to test an
organization's network security.
 Continued
• 6. Denial of Service :-
• It is an attack which meant to make a server or
network resource unavailable to the users.
• It accomplishes this by flooding the target with
traffic or sending it information that triggers a
crash.
• It uses the single system and single internet
connection to attack a server. It can be classified
into the following-
 Continued
• Volume-based attacks- Its goal is to saturate
the bandwidth of the attacked site, and is
measured in bit per second.
• Protocol attacks- It consumes actual server
resources, and is measured in a packet.
• Application layer attacks- Its goal is to crash
the web server and is measured in request per
second
 Continued
7. Dictionary attacks :-
• This type of attack stored the list of a
commonly used password and validated them
to get original password
 Continued
8. URL Interpretation :-
• It is a type of attack.
• Where we can change the certain parts of a
URL, and one can make a web server to
deliver web pages for which he is not
authorized to browse.
 Continued
9. File Inclusion attacks :-
• It is a type of attack that allows an attacker to
access unauthorized or essential files which is
available on the web server or to execute
malicious files on the web server by making
use of the include functionality.
 Continued
10. Man in the middle attacks
• It is a type of attack that allows an attacker to
intercepts the connection between client and
server and acts as a bridge between them.
• Due to this, an attacker will be able to read,
insert and modify the data in the intercepted
connection.
 System-based attacks

• System-based attacks :-
• These are the attacks which are intended to
compromise a computer or a computer
network. Some of the important system-based
attacks are as follows
 Continued
1. Virus :-
• It is a type of malicious software program that
spread throughout the computer files without the
knowledge of a user.
• It is a self-replicating malicious computer program
that replicates by inserting copies of itself into
other computer programs when executed.
• It can also execute instructions that cause harm to
the system.
 Continued
2. Worm :-
• It is a type of malware whose primary function
is to replicate itself to spread to uninfected
computers.
• It works same as the computer virus. Worms
often originate from email attachments that
appear to be from trusted senders.
 Continued
3. Trojan horse :-
• It is a malicious program that occurs unexpected
changes to computer setting and unusual
activity, even when the computer should be idle.
• It misleads the user of its true intent.
• It appears to be a normal application but when
opened/executed some malicious code will run
in the background.
 Continued
4. Backdoors :-
• It is a method that bypasses the normal
authentication process.
• A developer may create a backdoor so that an
application or operating system can be
accessed for troubleshooting or other
purposes.
 Continued
5. Bots :-
• A bot (short for "robot") is an automated process
that interacts with other network services.
• Some bots program run automatically, while
others only execute commands when they
receive specific input.
• Common examples of bots program are the
crawler, chatroom bots, and malicious bots.
The Marketplace
for vulnerabilities
 The Marketplace for vulnerabilities

• The Marketplace for vulnerabilities :-

• Vulnerability is a cyber-security term that refers to
a flaw in a system that can leave it open to attack.
• Vulnerable consumers fail to understand their
preferences and/or lack the knowledge, skills, or
freedom to act on them.
• The aim is to significantly replace trial and error
with a robust understanding of markets, markets
habitually governed by social virtues.
Continued
Continued
Continued
Hijacking and
Defense
 Hijacking
1. Hijacking is a type of network security attack
in which the attacker takes control of a
communication .
 Control Hijacking
• A control-hijacking attack overwrites some
data structures in a victim program that
affect its control flow, and eventually hijacks
the control of the program and possibly the
underlying system.
 Control Hijacking attacks
• Control Hijacking attacks
• Attacker's goal: -Take over target machine (e.g.
web server)
• Execute arbitrary code on target by hijacking
application control flow