Question

As the network security administer, you are concerned the wireless network has been compromised even though all of the proper security standards and controls are in place and functioning within specification.

a. Describe what you should be looking for next and why?
b. What devices could be used?
c. Who be the likely hacker?
d. How can you tell the difference between the two types of potential compromises?

Answer 1

Answer:

Given that:

a. Describe what you should be looking for next and why?
It could be possible that the firmware of the device may get vulnerable or hacker may found the loophole of the present firmware to enter into the network by some ARP spoofing and DNS redirecting and other tools.
so, asap update firewall and all the software which are configured in the present senario.

b. What devices could be used?
Latest router should be use with the latest firewall inbuilt as well as hardware firewall with advanced penetration attack protection.

If we talk about the hackers they have more powerful tools as well as the biggest tool is their MIND which they use more then any administrator do rather they are not alone they are in group so to defeat a gang administrator need a gang of talents.

c. Who be the likely hacker?
sometimes they may be intruders and leak info to extruders for further attack to be taken place in by using his/her credential extruders enters to the system and make theri work and clear logs and vanish.

d. How can you tell the difference between the two types of potential compromises?

Theft of FTP Passwords: This is another very common way to tamper with web sites. FTP password hacking takes advantage of the fact that many webmasters store their website login information on their poorly protected PCs.

The thief searches the victim’s system for FTP login details, and then relays them to his own remote computer. He then logs into the web site via the remote computer and modifies the web pages as he or she pleases.

Viruses are computer programs that attach themselves to or infect a system or files, and have a tendency to circulate to other computers on a network.

They disrupt the computer operation and affect the data stored – either by modifying it or by deleting it altogether. “Worms” unlike viruses don’t need a host to cling on to. They merely replicate until they eat up all available memory in the system.

The term “worm” is sometimes used to mean selfreplicating “malware” (MALicious softWARE). These terms are often used interchangeably in the context of the hybrid viruses/worms that dominate