cyber ppt all topic are covered.pptx
- 1. HOW CRIMINALS PLAN THE ATTACK
- 2. AGENDA 1.Introduction 2.How Criminals Plans A Attack • Reconnaissance • Scrutinizing and Scanning the Gathering Information • Attack 3.Summary
- 3. INTRODUCTION Cyber Attack A cyber attack is any malicious attempt to gain unauthorized access to a computer, computing system or computer network with the intent to cause damage. Cyber attacks aim to disable, disrupt, destroy or control computer systems or to alter, block, delete, manipulate or steal the data held within these systems. Cyber Criminals Cyber criminals are individuals or groups of people who use computers and networks to commit online crimes. Using malware programs, they aim to harm other individuals, companies, and governments.
- 4. HOW CRIMINALS PLAN A ATTACK
- 5. 5 Below are the three phases involved in planning a cyber-attack: 1.Reconnaissance – this is the information gathering stage and is usually considered a passive attack. 2.Scanning and scrutinization of the collected data for validation and accurate identification of existing vulnerabilities. 3.Launching the attack – entails gaining and maintaining access to the system.
- 6. 1. RECONNAISSANCE • The first step in how cybercriminals plan attacks is always Reconnaissance. The literal meaning of reconnaissance is an act of exploring with an aim or goal of finding someone or something about the target. • Reconnaissance begins with “Footprinting”. • Footprinting gives an overview of the victim’s weak points and suggestions on how they can be exploited. The primary objective of this phase is to provide the attacker with an understanding of the victim’s system infrastructure, the networking ports and services, and any other aspect of security required for launching attacks.
- 7. Thus, an attacker attempts to source data from two different phases: 1. Passive attacks: In this phase, an attacker secretly gathers information about their target; the aim is to acquire the relevant data without the victim noticing. 2. Active Attacks: An active attack involves closely examining the network to discover individual hosts and verify the validity of the gathered information, such as the type of operating system in use, IP address of the given gadget, and available services on the network, collected during the passive attack. It involves the risk of detection and can also be referred to as “Active reconnaissance”
- 8. 2.SCRUTINIZING AND SCANNING THE GATHERED INFORMATION Scanning is a key step to intelligently examine after as you collect information about the network infrastructure. The process has the following objectives; 1. Network scanning is executed to understand better the IP address and other related information about the computer network system. 2. Port Scanning – to identify any closed or open ports and services 3. Vulnerability scanning – to identify existing weak links within the system.
- 9. 5. ATTACK The attack phase is the last step in the attack process. It involves the hacker gaining and maintaining full control of the system access. It comes immediately after scanning and enumeration, and it launched sequentially as listed in the below steps. 1. Brute force attack or any other relevant method to bypass the password. 2. Exploit the password. 3. Launch the malicious command or applications. 4. If requires, then hide the files. 5. Cover the tracks, don’t leave any trail that can lead back to you as the malicious third party. This can be achieved by deleting logs so that there is no trail for your illicit actions.
- 10. SUMMARY Cybercrime is a complicated and vast phenomenon. The rapid increase in phones, Wi- Fi networks, and the internet has increased the complexity and cyber-attacks. The advancement in technology has led to an expansion in cyber- criminality and the cyber victimization of the vast ignorant population.
- 11. THANK YOU