Connect with us

Network Security

The Leading Cause Of security breaches

Published

7 years ago

on

web application

Web applications are the leading cause of security incidents for financial services, according to the 2016 Verizon Data Breach Investigation Report; this is up from 31 percent from last year’s report.

Verizon describes web app attacks as any incident in which a web application was the vector of attack. This includes exploits of code-level vulnerabilities in the application as well as thwarting authentication mechanisms. Key findings of the 2016 DBIR highlighted the information and retail sectors as top industries, alongside financial services, under attack. The report also revealed that “the breaches within this pattern are heavily influenced by information gathered by contributors involved in the Dridex botnet takedown. Hundreds of breaches involving social attacks on customers, followed by the Dridex malware and subsequent use of credentials captured by keyloggers, dominate the actions. Defacements are still commonplace and CMS plugins are also a fruitful attack point.”

“This is why web application security matters,” says Anton Jacobsz, MD at Networks Unlimited, a South African value-added distributor of converged technology-, data centre-, networking-, and security technology solutions, operating throughout Africa. “Victim demographics range far and wide, and when it comes to having your data compromised, no country, industry or business is bulletproof.”

Read More>>

Related Topics:
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Network Security

Benefits & Pitfalls of firewalls in a network

Published

11 years ago

on

February 25, 2014

By

network firewall

network firewallSecures a computer network from hostile intrusions.

Firewalls can monitor and record information. This can be of value in determining who is accessing what type of information.

Firewalls can be used to complement or supplement content and email filtering solutions.

(more…)

Continue Reading

Database Security

Hacking WEP Encryption Algorithm

Published

11 years ago

on

February 25, 2014

By

Hacking WEP
  1. Use Linux. Windows cannot sniff WEP packets, but you can use a bootable CD of Linux.
  2. Get a packet-sniffing program. Backtrack is a commonly-used option. Download the iso image and burn it on a bootable CD/DVD.
  3. Boot Linux and Backtrack. Use your bootable CD/DVDs. Note that this operating system is not required to be installed on hard drive. That means whenever you shutdown the Backtrack, all your data will be lost.
  4. Select a start-up option. The following Backtrack screen will show after booting. Change the option with the up and down arrow keys and select one. This tutorial will use the first option.
  5. Load the graphical interface via command base. In this option, Backtrack is started on command base. Type command: startx to continue.
  6. Click on terminal button at the bottom left. It’ll be the fifth option.
  7. Wait for the Linux command terminal to open.
  8. View your WLAN type. Enter the following command: “airmon-ng” (without quotes). You should see something like wlan0 beneath Interface.
  9. Get all the required information for the access point. Enter the following command: “airodump-ng wlan0” (without quotes). You should get three things:
    • BSSID
    • Channel
    • ESSID (AP Name)
    • Here’s what the tutorial case turned up:
      • BSSID 00:17:3F:76:36:6E
      • Channel number 1
      • ESSID(AP Name)Suleman
  11. Enter the following command. This one will use the example information above, but you should plug in your own. Command: “airodump-ng -w wep -c 1  bssid 00:17:3F:76:36:6E wlan0” (without quotes).
  12. Allow setup to start.
  13. Open a new terminal window. Type the following command, substituting the values for your own BSSID, Channel and ESSID. Command: “aireplay-ng -1 0 –a 00:17:3f:76:36:6E wlan0” (without quotes).
  14. Open another new terminal window. Type the following command: 
    "aireplay-ng -3 –b 00:17:3f:76:36:6e wlan0 (without quotes)"
  15. Allow setup to start.
  16. Go back to the first terminal window.
  17. Allow the data in this window to reach to 30000 or above. It will take 15 to 60 minutes (or more) depending on wireless signal, hardware and load on access point.
  18. Go to the third terminal window and press Ctrl + c.
  19. Pull up the directories. Type the following command: “dir” (without quotes). This will show the directories saved on it during decrypting.
  20. Use a cap file. For the example, it would be the following: “aircrack-ng web-02.cap” (without quotes). The setup shown below will start.
  21. Break the WEP encrypted key. After this setup completes, you’ll be able to break the key. In this example, it was {ADA2D18D2E}.

Continue Reading

Trending