Network Based Threat Research

CMGT/431
24 Aug 2015

Network Based Threat Research With advancements in the ever growing internet with more and more individuals becoming accustomed to using the web as a means of communicating the opportunity for outside sources to gain ones information is expanding daily. Recently the Department of Defense’s Joint Staff became the latest target in a spear phishing attack. For over two weeks more than 4,000 users on the Defense network have been shut down by this attack (Starr, 2015). Where are all these threats originating from? They are from every location on the universe within the United States, China, Russia and even our own allies (Starr, 2015).
Provide a description of a few network based threats The recent attack on the Department of Defense was a spear phishing attack. These are attacks through emails sent to employees with hopes that they open the link. Once the link is opened they give up their network credentials and it allows an outside source into a network. Denial-of-servie (DoS) and distributed-denial-of-service (DDoS) are attacks from one or more devices that are targeted at a server that creates so much traffic or demands for services that the target cannot respond to legitimate requests (TechTarget, 2000-2015).

Figure 1: In a DDoS attack, multiple devices (red) flood a server with requests, overwhelming the server and blocking legitimate users (green).
Malware or malicious software is any software that is used with intentions to disrupt computer operations, gather information or gain access to private computers (Norton, 1995).
For each threat, focus on describing how the threat exploits network vulnerabilities In the case of the Phishing attack on the Joint Staff, malicious emails are created that resemble legitimate emails with links. Those links are the key the attacker is hoping the end user opens. If opened full access is usually gained by the attacker. The end user usually doesn’t know what just happened by opening the link. Once inside the attached can move throughout the network with whatever rights the end user had. This can go on for days, months and even years without proper detection. DoS and DDoS are attacks that are geared to slowing or shutting down a network. This is accomplished by one or more devices being used to gain access to a network. With all the incoming traffic this creates the server cannot keep up with the demand and any true users are then kept out or slowed down from any access to the network. At worst case the server fails and goes off line. Malware or malicious code is software programs that infiltrate a computer, again without the end user knowing it had happened. Once installed on a system it is designed to steal personal information and send that back to the source. Malware comes in different forms of code including viruses, worms and Trojan horses and usually hidden within files, programs and websites to name a few.
Explain the controls that would counter these threats To mitigate these threats means to have whatever tools are available to stop these from occurring. Having a firewall with the proper antivirus software installed will stop, quarantined and notify the end user of any sure problem areas. This software runs in the background is always on the lookout for these threats (Rubens, 2013). Any key element to this is having the software always updated. Everyday hundreds of new threats are detected. For this reason threat catalogs are always updated. However, you can have all the best software and hardware available but human error is usually there the breakdown occurs. To combat this one needs to be vigilant about all these types of threats. One needs to know what to lookout for when opening emails that have attached files and links. For large companies, having an ongoing training program for network/security awareness is important to the success of the business.
Conclusion
It is vital importance that everyone has some type of virus protection installed on their personal, business and mobile computers. With everyone being on the internet, receiving emails and communicating with mobile devices they become a target for attacks. The means bringing in malicious programs is so much easier compared to twenty years ago.

References
Norton. (1995). Malware. Retrieved from Norton by Symantec: http://us.norton.com/security_response/malware.jsp
Rubens, P. (2013, March 25). 6 Emerging Security Threats, and How to Fight The. Retrieved from eSecurity Planet: http://www.esecurityplanet.com/network-security/6-emerging-security-threats-and-how-to-fight-them.html
Starr, B. (2015, Aug 7). Official: Russia suspected in Joint Chiefs email server intrusion. Retrieved from CNN Politics: http://www.cnn.com/2015/08/05/politics/joint-staff-email-hack-vulnerability/
TechTarget. (2000-2015). Network-based attacks. Retrieved from Search Security : http://searchsecurity.techtarget.com/feature/Network-based-attacks