securitywing

wing

Facebook Security Issues| Checklists

facebook security issues

Ever since Facebook has become an inevitable part of many of the Internet users, though not all, the cyber criminals are taking the advantage of Facebook users who does pay very little attention about the security of this giant social networking site. One of the most interesting thing is that many of the Face book users even has no knowledge about how much treats or what kind of attacks may occur in a Facebook profile and who is benefited and who is losing something very special due to unsecured setting s of a Facebook profile.Fortunately, only with little knowledge or even by following a few basic steps you can make your Facebook presence as protected and secure as any other conscientious Internet users.

[Read more…] about Facebook Security Issues| Checklists

Access Control List Configuration on Cisco Router

What is ACL: Access control list or ACLs are a set of if-then rules set on a router to allow or deny a specific group of IP to send or receive traffic from your network into another network.

When you apply an ACL to a route interface  for incoming traffic then every incoming packets will be compared with your ACL first, if a match is found then either permit or deny action will take place according to your configuration of the ACL. If there are more than one ACL and if there is no match after comparing the incoming packets with the first ACL, then the second ACL will be matched and so on. Remember there is an implicit deny after an ACL. That is why after permit or denies any IP or IP range you must add the command: access-list ip permit any any.

For example in your network you want that no computer or devices from 172.16.0.0 network can send traffic to your network. To implement this rule you need to write and ACL that will tell your router to discard all the traffic from 172.16.0.0. Now, let see how to implement this ACL into a router.

Rourter#configure terminal

Router(config)# access-list 10 deny ip 172.16.0.0 0.0.255.255

Router (config) #access-list 10 permits ip any any

[Read more…] about Access Control List Configuration on Cisco Router

Gmail Security Settings Checklist for Secure Login

gmail security

Whether you are new Gmail User or not, one thing is true that you don’t like to lose your privacy or don’t want to your email security be compromised by any third party or by your business competitors. For making sure that your Gmail account is fully secure and no one is snooping your private emails, you need to follow several steps which are also recommended by Gmail Security team.

Computer Security

  1. Make sure your computer has anti-virus or Internet security software installed and updated including the virus databases, spam protection tools etc.
  2. Check if your operating system has been updated with the latest release of the software provider. If you are a Windows user, then click on “My Computer”, then right click on it and select the “properties” and then click on “Windows Update”.
  3. You might be using Adobe, Windows Office, and Java. Make sure all these softwares are updated online on regular basis.

Browser Security

  1. Regularly update your browser. Check for updates at least once in a month. For example if you are a Firefox user, then click on the help menu on your browser and then click on “check for updates…)
  2. Avoid downloading Browser extensions and plugins. These  extension  softwares are basically third party software which give some extra functionality to your browser. For instance, many use email alert extension in browser. There is no guarantee that these extension codes do not have any hidden code that might compromise your browser security.            [Read more…] about Gmail Security Settings Checklist for Secure Login

Computer Security Essentials

computer security

The major threats a computer user may expect are – the damage of his stored data or software and stealing of confidential information. A computer can get infected with malicious programs like virus, Trojan, crimeware, spyware, malware or anything else, but the main challenge in front of you is to keep your all the data safe and also to keep your confidential information private while you are online. Before you going online, have you ever thought that your every keystrokes is being tracked by a small code hidden in your laptop or your every online transaction with credit card are being screen shots by a spy software and sending all those confidential data to a cyber criminal sitting back miles away from your town. A malicious code even open a secret door (backdoor) to a rouge person to enter your computer when you go online. As you know that, every disease has its treatment, the same way every malicious code can be identified and tracked before it because any damage to your computer and it can only be done once you have Internet security or at least an updated antivirus solution.

Therefore, a computer user need to be concerned with safety and privacy of all his logical assents-software, database, emails, operations system. In addition, the good news is an average user can be quite efficient in keeping his computing environment safe and sound, if he follow a few guidelines and maintains a few instructions on regular basis. The following are very important steps that you may follow on regular basis and can ensure a great level of computer safety.

  • Use Internet security solutions or at least keep good antivirus software
  • Always keep updated your antivirus and Internet security software. Though this sounds like a very ordinary task, yet it is one of the most important tasks that many forget to do regularly. It is advisable to keep your antivirus software in auto-update mode.
  • Keep your operating system updated. For example if you are Windows user then , right click on “My Computer”, select “properties” and then select “Automatic Updates” tab, click on “Automatic and then click on the “apply button”    [Read more…] about Computer Security Essentials

CISSP Exam Domains

Computer security is getting more importance day by day due to exponential dependence of information technology. Our institutional education does not deal with how effectively we need to handle information security risk in real world scenario-that is why there are many information security certification course. Among all the most prestigious and recognized courses are  CISSP and CISA.

To become a CISSP you need to have 4-year experience in the field of information security or in similar types of field. (CISSP)Certified Information system security professional offer specialization and sound understanding of with ten domains of information security-

  • Access control for information system.
  • Telecom network security.
  • Information security management.
  • Cryptography.
  • Information security models and architecture.
  • Operational security.
  • Business continuity plan and disaster recovery plan.
  • Security laws, investigations and ethics.
  • Physical security.

CISSP basically emphasis on the concepts and vulnerabilities aspects of security, whereas CISA (certified information systems auditor) exam. stresses on the auditing aspects of the information security. CISA is simply the best security auditing certification of the world in recent times and it focus on IS auditing and audit processes, IT governance, networking technology, Protection of information assets, life cycle management, DRP(disaster recovery process), and risk assessment. The average salary of a CISSP in USA is 70,000 USD. On the other hand, CISSP is all about what to look for vulnerabilities and how to to find it in a information system. In a much broader sense, CISA is about audit processes and CISSP is all about audit procedures.

Screening Router Security Test

Much small-scale business does not use firewall as their first line of defense any web attacks to their internal network. Instead, they use a router between the Internet and Internal network to control incoming and outgoing traffic flow- this type of use of router is known as screening router. In fact, configuring ACLs inside a router can be a viable and effective solution to deny any incoming malicious packets to your LAN. If you have to test one such type of network router that is used a screening router, then you have to identify the type of router and its features. List all the ACL policy and the types of data packets that are permitted to enter your network. What are the router responses to various types of incoming traffic? Finally list all the live systems The following are the list of activity the you have to perform to test a screening router

1. Identify router type

2. List NAT, if there is any

3. Use TTL setting test by using port scanning

4. Test all the ACLs in the router

5. Verify if the address spoofing is being detected by the router

6. Test inverse scanning

7. If the router is filtering local traffic(egress filtering)

8. How the router is handling small size packets

9. How over-sized packets are being handled in the router

10. How router responding to overlapped packets. Normally overlapped fragments are used in TEARDROP attack.

CCNA-Best Networking Exam

CCNA (Cisco certified network associates) routing and switching is the most popular and sought after certification course in the networking industry. It is indeed the best course for anyone looking for entry into the networking area. If one can properly grasp the complete syllabus of CCNA then they should be able to maintain, configure and troubleshooting any small scale to mid-sized network efficiently. CCNA primarily cover the topic of IP, OSI & TCP/IP models, routing protocols (RIP, EIGRP, OSPF), ACL, NAT, Wireless LAN, VLAN, Ethernet, and WAN. Apart from CCNA routing and switching there are three more flavors:

  • CCNA security
  • CCNA wireless
  • CCNA voice

The average salary of CCNA in USA is $45, 000. There is no perquisite for CCNA routing and switching exam; you may consider taking training for CCNA in any training center. Upon completion of the course you need to register for an exam date. The current CCNA registration will cost 250 USD. You must register for the exam at least four-week prior to your final examination data to reserve your seat for the exam.