Question

1.Create an after action report Create an After-Action Report for management that describes how Ddos attack could have occurred after disgruntled employees were fired.

2.Analyze and explain how using specific industry best practices can protect the company network.

3.Determine and explain security measures, in detail, that you would recommend to enhance security.

4.Include how cryptography and authentication can support security.

Answer 1

Solution:

1)

The attack could have occurred for the following reasons:-

a.Butter overflow attack-This is one of the most common DOS attacks.Its aim is to send the huge number of traffic to the network which it cannot handle.As a result, it locks up the whole system with such huge request.
b.ICMP Flood-It takes one of the misconfigured networks by sending dummy packets that are going on every machine except a particular machine.After that, this network is triggered to increase the traffic flow.This is also known as the ping of death.
c.SYN flood - This one sends a request to the server but it never completed the handshakes.As a result, this leaves the port opened to be used.

2)

The attack can be stopped by using the following ways:-
a.The company needs to purchase a lot of bandwidth.It prevents the attacker as he cannot jam the network.
b.To have proper detection techniques which will help to identify the difference between legitimate and malicious traffic.
c.Use of throttling and rate limiting technologies can prevent the attack a greater strength.

3)

Security measure which should be taken by the company is
a.First of all the company need to purchase a lot of bandwidth.
b.HAve a proper detection method to identify the traffic.
c.Use of throttling and rate-limiting techniques.
d.Keeping a strong firewall.
e.Have all the antivirus and security features up to date.

4).

Cryptography and authentication can support security

When a data is encrypted, it is done with a particular key and that key is not known to anyone except the user.So for other, the message seems nothing but some meaningless characters.The other end of the user, when supplied with the key, can decode the message and have it.So having an encryption increase the security standard of an organization.

I hope this helps if you find any problem. Please comment below. Don't forget to give a thumbs up if you liked it. :)