DOCSLIB.ORG

INFORMATION SECURITY 1 Jelsteen.J, 2 M

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
INFORMATION SECURITY 1 Jelsteen.J, 2 M JASC: Journal of Applied Science and Computations ISSN NO: 1076-5131 INFORMATION SECURITY 1 Jelsteen.J, 2 M. Nithya Shree, 3K.Meenashi, 1Assistant Professor, MCA., M.Phil( P.hD), Department of BCA 2, 3 II BCA, Department of BCA Sri Krishna Arts and Science College, Coimbatore [email protected] [email protected] [email protected] Abstract The concept of belief is currently not present in our environment. Users of internet are always in verge of threat by unknown resources. Threats can be received by any means, for example through emails and messages. Lots of attention should be earned from the people towards protecting their private information and alertness towards the threats from unauthorized resources. With this inspiration in our minds we have tried to bring out the possible threats and defenses against it. And also to explain the common methods hackers handle to breach our information. figure :1 Introduction Information security also called as infosec is a practice of protecting the users from unknown access, replacement of information and destruction of the data. Information security further ensures the confidentiality, integrity and availability. This kind of protection for the users is the primary aim of the information security. 1. Confidentiality: Confidentiality means information is not revealed to unauthorized websites, individuals and organizations. 2. Integrity: It ensures the accuracy of the information in its lifecycle [1]. In other words, information cannot be rewritten by unauthorized users. 3. Availability: To satisfy the needs of the users ,an information should be available to them whenever they need. It also ensures to block the denial of service attack which inhibits the availability of information. Need of Infosec Government, Military, Corporations, Hospitals etc have many sensitive information like usernames, personal information etc Volume VI, Issue II, February/2019 Page No:2213 JASC: Journal of Applied Science and Computations ISSN NO: 1076-5131 which should not be known by others. There are hackers who impose threats to these sectors which increases the need to protect this information. Theft of equipment or information is becoming more common today due to the reality that most devices today are mobileprivacy of the users we mainly need information security. are vulnerable to theft and have also become far more desirable as the amount of data capacity increases[2]. To ensure the Threats As the time moves on, need of the people increases widely. Hence people need more technology to simplify their works. Here come the smart phones which can satisfy the need of the people. There are few mobile applications that open up a new page on their own, which provides a link between the hackers and the information present in our phones. Presence of malware which inputs harmful codes in our system to breach our private information. Viruses, worms and Trojan horses can go into our system to steal information [3]. There are various threats imposed by malware: 1. Adwares Adwares impose threats by means of advertisements. They breach our private information. An attacker inserts malicious codes with ads which monitors our activities. They get installed in our system with our notice and starts to display advertisements on its own when users use browsers [4]. 2. Spywares It is a program or software which regularly spies on the users and collects the information and provides those details to third party. Spywares enter through our system mainly through internet explorer. Their main tool is cookies. They collect user’s information through cookies. 3. Ransomware Ransomware are challenging ones, as they lock our systems which make the user unable to access their own computers. They demand the users for money. Starting from year 2012, use of ransomeware has increased tremendously. Ransomeware attacks are done with the help of Trojans. 4. Zombies They are alike to spyware except that they wait for the command from the hackers. They also steal private and confidential information. Zombie computers are controlled by hackers. They create spam emails. 50% of the spam emails are sent by Zombies computers. 5. Worms A Worms is a computer program that replicates itself. They jump from one computer to another easily with the presence of the network [5]. It reduces the performing speed of the computer considerably. Worms can place a copy of itself onto all the Web servers the affected system can extend. This affects the web servers also [6]. 6. Watering Hole Attack In this kind of attack, hacker pursues a method in which they secretly observe a group or organization to find out which website they use often [7]. And then attackers or hackers insert a malware inside that website. Any one employee gets affected in the organization by the malware, which opens the way to get the entire information about the organization. Threats faced by MNCs 1. Ebay During May 2014 ebay faced a cyber attack which exposed the names, date of birth, addresses and phone numbers of the users. Hackers got hold of three employee’s accounts, which was the starting point of the hacking. Volume VI, Issue II, February/2019 Page No:2214 JASC: Journal of Applied Science and Computations ISSN NO: 1076-5131 2. Yahoo Around September 2014 Yahoo faced biggest cyber attack which exposed the personal information of approximately 500 million people. Yahoo urged people to amend their passwords and security questions as soon company heard about the hacking, so to prevent further more breach of information. 3. Uber In late 2016 two hackers stole phone numbers, email addresses of 57 million users. Hackers also managed to steal license plate numbers of 6 lakhs uber drivers. Hackers accessed the data stored in third party cloud based services that uber used for storing customers details. 4. Sony Play station Networks This incident is marked as one of the worst breach of information faced by any company, as it involved 77 million accounts. Hackers gained access to the emails, address, bank details and login details. This incident happened 20th of April, 2011. 5. Adobe This incident had impact on nearly 38 million users. Company revealed that hackers got hold of bank details of the users and login details. This incident happened in October 2013. 6. Chinese Country Level Watering Hole Attack This incident happened in 2018. Chinese hacker group called LuckyMouse was responsible for this watering hole attack in China. They inserted a malicious code in JavaScript, inside the official government websites to get the details about the government employees. Defenses 1. Firewall Firewalls are protective shields against the hackers. They have a capability to identify the trusted and untrusted networks in internet. Firewall prevents us from various cyber attacks. They carefully select the data need to be given. They also prevent unwanted intrusions. A main disadvantage in using the firewall is that they are incapable to prevent us from malware attacks. 2. Mobile Secure Gateway It provides secure transfer of data in mobile. It is composed of two main components client library and gateway. The client library is linked with the mobile application which gives a safe access to servers through gateways. Gateway uses the communication protocols like IPv4 and IPv6. 3. Cryptography Cryptography provides a well secured and more restricted communication with presence of third parties, called adversaries [8]. Cryptography is to fabricate and examine the protocols that prevent others from reading the personal messages. It ensures various features of information security like confidentiality, data integrity, and authentication .Cryptography has its own boundaries as it can also be used to espionage and government has restricted its uses [9]. (a)Encryption Encryption is the process of changing a data to format that can be accessed only by authorized users. Unauthorized users cannot access the data. Encryption has been used widely in communication between Militaries and governments. It is now frequently used in protecting information within many kinds of civilian systems. For example, the Compute r Security Institute reported that in 2007, 71percent of companies surveyed used encryption for some of their data in transit, and 53% utilized encryption for some of their data in storage Volume VI, Issue II, February/2019 Page No:2215 JASC: Journal of Applied Science and Computations ISSN NO: 1076-5131 (b)Decryption Decryption is changing the encrypted data into its original format. It is a crucial step because this decrypted data is the one understandable by users. As information travels over the Internet, it is necessary to scrutinize the access from unauthorized organizations or individuals. 4. Authentication The process of identifying the user using username and passwords and then providing the access to their accounts is called as authentication. It does not say about the access rights about the individual. In simple terms users should prove their identity to the server for access their data. 5. Application Security Application securities are the steps taken to prevent the vulnerable attacks faced by the users while using an application. Application software includes antivirus software which is widely used by people to safeguard their system from virus attacks. It prevents the users from denial of service attack and unplanned events like failure of storage device. Dominance of Information Security 1. Easy to utilize the services provided by it 2. As the technology increases crimes against it also gets increased 3. Help us to save our information by not getting into wrong hands 4. Information security will be helpful in the areas of banks , offices and many others sectors 5. Information security protects the data while it is in use as well as when it is not in use. 6. Information security will be helpful in the areas of banks , offices and many others sectors 7. Rate of cyber attacks and the threats for the private information are reduced figure 2 Drawbacks of Infosec 1.
Load more

Recommended publications
  • Mastercard Mobile Receipt Management
    Mastercard Mobile Receipt Management Increscent and well-derived Zebulen phrased her nationals chamades oust and exsiccate motherly. Ansell enamels after as boreal Tabbie rumorswheels impalpably.her steam-boilers replenishes loiteringly. Harald is spot-on and unhood logistically as tragic Dory applaud experimentally and Apple Pay Frequently Asked Questions Mobile Device. Exxon Mobil Rewards Mobile Application FAQs. The applicant listed for this patent is MASTERCARD INTERNATIONAL INCORPORATED. Unlimited receipt scanning with timely free mobile app Integrate seamlessly. Security information and event management Mobile secure gateway Runtime application self-protection Web application security v t e Credit card however is an inclusive term for fraud committed using a cozy card such always a credit. Commercial Card debt Business Credit Card. Customer support center with emv readers for dining at a management mobile banking experience. Card Benefits Center red Bank. CEO Mobile can save story time Check balances Upload receipts Track expenses All expect one place once more Deposit products offered by Wells Fargo Bank. Mobile Payment App Best Payment Apps for sale Business. Receipt Management App Streamline expense tracking and skip any extra paperwork. Take action is there are registered trademarks of advertising or not be substantiated per employee and other embodiments, expense management topics. Whether in need a following or purchasing credit card for everyday expenses or. Swipe to Tap the History of Credit Card Processing Technology. Card Management System CMS Our online program management tool enables companies to. Card with Apple Pay and retrieve out state to summer your credit card the default card when using Apple Pay. Introducing the insight Bank Expense Card have Receipt.
    [Show full text]
  • U.S. Research Published by Raymond James & Associates
    U.S. Research Published by Raymond James & Associates Technology & Communications September 17, 2012 Industry Report Wayne Johnson, (404) 442-5837, [email protected] Dustan Berg, Res. Assoc., (404) 442-5833, [email protected] Transaction Processing: Industry Overview Transaction Processing Please read domestic and foreign disclosure/risk information beginning on page 98 and Analyst Certification on page 98. © 2012 Raymond James & Associates, Inc., member New York Stock Exchange/SIPC. All rights reserved. International Headquarters: The Raymond James Financial Center | 880 Carillon Parkway | St. Petersburg, Florida 33716 | 800-248-8863 Transaction Processing U.S. Research Contents Introduction .............................................................................1 Company Profile: VeriFone Systems, Inc. .................................2 Visa Vs. MasterCard .............................................................. 13 Industry Overview ................................................................. 24 Common Operating Metrics .................................................. 34 Mobile ................................................................................... 35 Transaction Processing Coverage Universe .......................... 48 ACI Worldwide, Inc. ............................................................... 65 Alliance Data Systems Corp. .................................................. 67 Bottomline Technologies ...................................................... 69 Fidelity National
    [Show full text]
  • CYBERSECURITY When Will You Be Hacked?
    SUFFOLK ACADEMY OF LAW The Educational Arm of the Suffolk County Bar Association 560 Wheeler Road, Hauppauge, NY 11788 (631) 234-5588 CYBERSECURITY When Will You Be Hacked? FACULTY Victor John Yannacone, Jr., Esq. April 26, 2017 Suffolk County Bar Center, NY Cybersecurity Part I 12 May 2017 COURSE MATERIALS 1. A cybersecurity primer 3 – 1.1. Cybersecurity practices for law firms 5 – 1.2. Cybersecurity and the future of law firms 11 – 2. Information Security 14 – 2.1. An information security policy 33 – 2.2. Data Privacy & Cloud Computing 39 – 2.3. Encryption 47 – 3. Computer security 51 – 3.1. NIST Cybersecurity Framework 77 – 4. Cybersecurity chain of trust; third party vendors 113 – 5. Ransomware 117 – 5.1. Exploit kits 132 – 6. Botnets 137 – 7. BIOS 139 – 7.1. Universal Extensible Firmware Interface (UEFI) 154– 8. Operating Systems 172 – 8.1. Microsoft Windows 197 – 8.2. macOS 236– 8.3. Open source operating system comparison 263 – 9. Firmware 273 – 10. Endpoint Security Buyers Guide 278 – 11. Glossaries & Acronym Dictionaries 11.1. Common Computer Abbreviations 282 – 11.2. BABEL 285 – 11.3. Information Technology Acronymns 291 – 11.4. Glossary of Operating System Terms 372 – 2 Cyber Security Primer Network outages, hacking, computer viruses, and similar incidents affect our lives in ways that range from inconvenient to life-threatening. As the number of mobile users, digital applications, and data networks increase, so do the opportunities for exploitation. Cyber security, also referred to as information technology security, focuses on protecting computers, networks, programs, and data from unintended or unauthorized access, change, or destruction.
    [Show full text]
  • Vulnerability in Information Technology and Computing- a Study in Technological Information Assurance
    International Journal of Management, Technology, and Social SRINIVAS Sciences (IJMTS), ISSN: 2581-6012, Vol. 4, No. 2, November 2019. PUBLICATION Vulnerability in Information Technology and Computing- A Study in Technological Information Assurance P. K. Paul1, A. Bhuimali2, P. S. Aithal3, & R. Rajesh4 1Executive Director, MCIS, Department of CIS, Raiganj University (RGU), West Bengal, India 2Vice Chancellor, Raiganj University, West Bengal, India 3Vice Chancellor, Srinivas University, Karnataka, India 4Principal, Rohini College of Engineering and Technology, TN, India Corresponding Author: [email protected] Area/Section: Computer Science. Type of the Paper: Research Paper. Type of Review: Peer Reviewed. Indexed in: OpenAIRE. DOI: http://doi.org/10.5281/ Google Scholar Citation: IJMTS How to Cite this Paper: Paul, P. K., Bhuimali, A., Aithal, P. S., & Rajesh, R. (2019). Vulnerability in Information Technology and Computing- A Study in Technological Information Assurance. International Journal of Management, Technology, and Social Sciences (IJMTS), 4(2), 87-94. DOI: http://doi.org/10.5281/ International Journal of Management, Technology, and Social Sciences (IJMTS) A Refereed International Journal of Srinivas University, India. IFSIJ Journal Impact Factor for 2018 = 4.764 © With Authors. This work is licensed under a Creative Commons Attribution-Non Commercial 4.0 International License subject to proper citation to the publication source of the work. Disclaimer: The scholarly papers as reviewed and published by the Srinivas Publications (S.P.), India are the views and opinions of their respective authors and are not the views or opinions of the SP. The SP disclaims of any harm or loss caused due to the published content to any party.
    [Show full text]
  • Israel CYBER SECURITY COLLABORATIONS Chicago Boston New York
    Accelerating U.S. - Israel CYBER SECURITY COLLABORATIONS Chicago Boston New York September 8-12 2014 Welcome! One of the greatest challenges facing us today is cyber security. We are all vulnerable to cyber attacks – whether it is in the public or private domain. The threats are widespread and have led to such chronic problems as viruses, spam, spoofing, phishing and pharming, spyware, and key logging, just to name a few. Cyber criminals are constantly improving their methods and are forcing industries and governments to do the same in order to protect themselves and stay ahead of the game. The United States and Israel are more determined than ever to protect their businesses and citizens from these threats by introducing new legislation and policies. At the same time, they are also supporting the development of innovative cyber security solutions by companies in both countries boasting cutting edge high tech capabilities. This year’s delegation of leading Israeli cyber security companies is one example of such support and represents some of the best technologies that Israel has to offer. We hope that joint development, business partnerships and investment opportunities will result from this week’s activities. The Government of Israel Economic Mission to North America The Israel-U.S. Binational Industrial Research and Development Foundation (BIRD) The America-Israel Chamber of Commerce – Chicago The Consulate General of Israel to New England – Boston Matimop – The OCS’ Americas Operations at MATIMOP The New England Israel Business Council 1 Agenda Accelerating U.S. - Israel Cyber Security Collaborations Chicago, Boston & NY September 8-12, 2014 Sunday, September 7, 2014 - Arrival in Chicago Monday, September 8, 2014 - Chicago On-site meetings with U.S.
    [Show full text]
  • (Pdf) Download
    SECURE SOLUTIONS SolonTek Corporation SECURE SOLUTIONS MITIGATING CYBERSECURITY RISKS IN DEVELOPMENT ENVIRONMENTS White Paper By Sara Spencer MITIGATING CYBERSECURITY RISKS IN LEGACY APPLIANCES, EMBEDDED SYSTEMS, APPLICATIONS AND OPERATING SYSTEMS 2 WHITE PAPER MITIGATING CYBERSECURITY RISKS IN DEVELOPMENT ENVIRONMENTS Executive Summary IT professionals and development business units have traditionally not worked very well together. This is because the IT professional is concerned with protecting the enterprise while the developer is pressured to develop meaningful products and needs more flexibility within the systems and environments which they work. Historically because the development teams ultimately produce revenue for the company and are under strict deadlines, they are put into self-managed labs, with the unspoken message to IT, “hands-off”. This builds a culture over time that there is no need to worry about the development teams’ infrastructure because they are in labs. A culture where IT does not want to be responsible for managing development environments because the relationship can become contentious. Traditional IT configures compute devices to prevent end-users from running arbitrary code, packet capturing tools, and debugging tools. Often these tools are necessary for the software development teams in order for them to do their job effectively. These tools could result in a broad attack surface to would-be attackers. The other issue between traditional IT and development teams, is the complexity of the systems that development
    [Show full text]
  • JETIR Research Journal
    © 2019 JETIR June 2019, Volume 6, Issue 6 www.jetir.org (ISSN-2349-5162) IoT (Internet of Things) Security 1Lalit Kumar Singh, 2Dr. Neetu Sharma 1M.Tech Scholar, Department of C.F.I.S, G.I.T.A.M, Kablana, Jhajjar, MDU, Rohtak, Haryana 2HOD, Department of C.F.I.S & C.S.E, G.I.T.A.M, Kablana, Jhajjar, MDU, Rohtak, Haryana Abstract : Global IoT(Internet of Things) requirement is increasing exponentially. Number of end users, end devices and IoT components are increasing day by day. It’s necessary to understand the different component of IoT solution and its threats and vulnerability and the technique to protect each layer of IoT from the external threats and protect it from unauthorized access to run the system smoothly. Index Terms - IoT Security, Hardware or Device or Edge security, System security, Information security. I. INTRODUCTION IoT stands for Internet of Things and it consist of two words, first word is Internet- which means connected or network and second the second word is Things- which means all object which act as data source in that network, these objects could be hardware or software or any other objects like human beings, animal and plants, but in most of the cases these things are sensor and devices. In other words, IoT is combination of IT and OT where IT means Information Technology and OT means Operational Technology. In IoT use cases all components of IoT are interconnected to each other to share their information. This interconnection could be between human to human or between machine to machine either on real time or near real time.
    [Show full text]
  • Dr. PS Aithal
    ORGANISING TEAM Chief Patron Sri. CA. A. Raghavendra Rao Chancellor, Srinivas University President, A. Shama Rao Foundation Mangaluru Patrons Dr. A. Srinivas Rao Pro- Chancellor, Srinivas University Vice-President, A. Shama Rao Foundation, Mangaluru Smt. A. Mitra S. Rao Secretary A. Shama Rao Foundation, Mangaluru Dr. P. S. Aithal Vice Chancellor, Srinivas University Prof. Shreepathy Rangabhatta B. Conference Convenor SRINIVAS UNIVERSITY City Campus, Pandeshwar, Mangaluru– 575 001 Karnataka State, India Website: www.srinivasuniversity.edu.in CONTENTS Sl. No Title Page No. 1. SCHOLARLY PUBLICATION BASED RESEARCH JOURNALS 1 CLASSIFICATION – NEW INSIGHT-BASED MODEL Dr. P. S. Aithal, Dr. Shubhrajyotsna Aithal 2. IMPACT OF DIGITALIZED EDUCATION ON STUDENTS – A 15 STUDY IN MANGALORE Ms Deshel Levines Fernandes, Mr. Gavin Abner Pinto 3. A STUDY ON REINVENTION AND CHALLENGES OF IBM 24 Kiran Raj K. M., Krishna Prasad K. 4. DIGITAL SERVICE INNOVATION USING ICCT UNDERLYING 33 TECHNOLOGIES Dr. P. S. Aithal, Dr. Shubhrajyotsna Aithal 5. INNOVATIVE AND CREATIVE TEACHING TO STIMULATE 64 PARTICIPATION OF STUDENTS AT HIGHER EDUCATION FOR SOCIAL CHANGE Aditi Jha 6. A STUDY ON THE MEASURES TAKEN BY COGNIZANT 71 TECHNOLOGY SOLUTIONS FOR ACHIEVING SUSTAINABLE GROWTH IN THE DIGITAL MARKET K. Geetha Poornima, Krishna Prasad K. 7. NETWORK SECURITY: THREAT & MANAGEMENT 85 P. K. Paul, P. S. Aithal 8. A STUDY ON CUSTOMERS OPINION ON BANKING 99 PRODUCTS AND SERVICES WITH SPECIAL REFERENCE TO SELECTED BRANCHES OF KASARAGODU DISTRICT COOPERATIVE BANK Mr. P V Joseph, Dr. P N Raghunathan 9. A CRITICAL ANALYSIS OF SUSTAINABLE BUSINESS 108 POLICIES OF TATA CONSULTANCY SERVICES LIMITED (TCS) K. Vikranth, Krishna Prasad K.
    [Show full text]
  • Secure Api Api Security Testing Checklist
    Secure Api Api Security Testing Checklist Mistaken and empurpled Ezra volatilise her workmanship half-note interpenetrates and familiarizing dorsally. Marshall is lissomly remarkable after sanious Lesley overcorrect his chemotherapy perforce. Griff often rivals sultrily when autocatalytic Rourke obstructs prodigally and pocks her boffs. Api scan we again invoke a secure api security testing checklist such as web API Security Testing Checklist Axway. Mitigate Replay Attacks for SPAs Learn hot to securely generate and validate. NIST SP 00-95 Guide for Secure Web Services NIST Page. API For general guidelines around web application penetration testing for your composite app review the OWASP Top Ten checklist. OWASP API Security Top 10 2019 SecOps. Because of testing checklist in our watches can. OWASP Top 10 10 Unprotected APIs Updated 2019. Sign all server-to-server Graph API calls with your App Secret. CRL or OCSP responder through some API to fully use PKI certificate management. Test Data related to security testing Test Tools required for security testing. Be stick to test the code before running it ill make before it's as bug-free is possible. What principal of security testing on API that you outline to request For awhile there of many checklist items in security for APIs GitHub shieldfy. Firebase security checklist Google. The first OWASP API Security Top 10 list was released on 31 December 2019. Penetration testing must modernize and automate to cover the corner of. Azure security baseline for API Management Microsoft Docs. Is strong open authorization standard designed to provide clients with secure restricted access. Secure Configuration Checklist Harden system accounts Privileges review Guest access yet Secure user password migrations Use and party authentication.
    [Show full text]