Scribd
Upload
7 views10 pages

Network Security Threats and Mitigation

The document discusses network security threats and mitigation strategies. It identifies types of network adversaries and their motivations, as well as common attack types like reconnaissance, access attacks, and password attacks. The document recommends techniques to secure the physical network infrastructure and mitigate password attacks, such as using unique passwords on different systems, disabling accounts after failed login attempts, and enforcing strong password policies. Overall it stresses the importance of network security policies and practices to protect against internal and external threats in today's environment.

Uploaded by

tuancoi
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
7 views10 pages

Network Security Threats and Mitigation

The document discusses network security threats and mitigation strategies. It identifies types of network adversaries and their motivations, as well as common attack types like reconnaissance, access attacks, and password attacks. The document recommends techniques to secure the physical network infrastructure and mitigate password attacks, such as using unique passwords on different systems, disabling accounts after failed login attempts, and enforcing strong password policies. Overall it stresses the importance of network security policies and practices to protect against internal and external threats in today's environment.

Uploaded by

tuancoi
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Securing the

Network

Building a Simple Network

[Link]

ICND1 v1.01-1

Closed Networks

Attacks from inside the network remain a threat.


[Link]

ICND1 v1.01-2

Open Networks

[Link]

ICND1 v1.01-3

Threat Capabilities
More Dangerous and Easier to Use

[Link]

ICND1 v1.01-4

E-Business Challenge

[Link]

ICND1 v1.01-5

Adversaries, Adversary Motivations, and


Classes of Attack
Adversaries

Motivations

Classes of Attack

Nation-states

Intelligence

Passive

Terrorists

Theft

Active

Criminals

DoS

Close-in

Hackers

Embarrassment

Insider

Crackers

Challenge

Distributed

Competitors
Script kiddies
Disgruntled
employees
Government
[Link]

ICND1 v1.01-6

Common Threats
Physical installations
Hardware threats
Environmental threats
Electrical threats
Maintenance threats
Reconnaissance attacksLearning information about a target
network by using readily available information and applications
Access attacksAttacks on networks or systems for these reasons:
Retrieve data
Gain access
Escalate their access privileges
Password attacksTools used by hackers to compromise
passwords
[Link]

ICND1 v1.01-7

Password Attack Threat Mitigation


Here are password attack threat-mitigation techniques:
Do not allow users to use the same password on multiple
systems.
Disable accounts after a certain number of unsuccessful login
attempts.
Do not use cleartext passwords.
Use strong passwords; for example, mY8!Rthd8y rather than
mybirthday.

[Link]

ICND1 v1.01-8

Summary
Sophisticated attack tools and open networks continue to
generate an increased need for network security policies and
infrastructure to protect organizations from internally and
externally based attacks.
Organizations must balance network security needs against
e-business processes, legal issues, and government policies.
Establishing a network security policy is the first step in changing
a network over to a secure infrastructure.
Network adversaries come in many shapes and sizes and with
multiple motivations.

[Link]

ICND1 v1.01-9

Summary (Cont.)
It is very important to provide physical installation security for
enterprise network devices.
Password attack threats can be mitigated.
Restrict password use.
Disable accounts after unsuccessful logins.
Do not use cleartext passwords; use strong passwords.

[Link]

ICND1 v1.01-10

You might also like