Nt1310 Unit 3 Data Analysis

Don’t use words that exist in foreign dictionaries as your passwords. It is risky. Online criminals and hackers could easily crack such passwords. However, you can use the first letter of each word in a long phrase to create strong passwords. You can also strengthen such passwords by making some letters uppercase and by swapping out some letters with numbers and symbols 7.

At least one character should be a Digit. 4. Symbols and Non alphabetic characters. Reversible Encryption: This is the setting present, when selected it allows the operating system to store the password using reversible encryption which helps to prevent the theft of the password and access to the hackers. Lockout Policy: This is the policy created by Windows to prevent the hackers from hacking the computer system.

Public key cryptography is an asymmetric method that use a pair of keys for encryption: a public key which is used to encrypt data, and private, or secret key is used to decryption. It requires that a person must have a pair of public key and private key. The public key is distributed in the open so that anyone wishing to communicate with that in a secure way than he can use the receiver’s public key to convert the plaintext into cipher text. This cipher text cannot be converted into same plaintext using same public key. Therefore, there is no issue if some other person knows about public key.

Transactions are put into blocks, recorded one after the other to form a chain of blocks (the 'blockchain'). The blocks and their content are protected by cryptography, so transactions cannot be destroyed or forged. This means that the ledger and network are trusted without an intermediary. Cross-border Payments The objective for financial institutions should be to deliver cross-border payment services in near real time and at a more competitive price. While maintaining their margins

This gave the hackers an access to the computer network and a possibility to control it remotely. Barclays faced losses of £1.3 million. The first thing that must be done in order to avoid similar attacks is not much related to cyber security: it is more rigorous physical protection of the computers and servers. Since an attacker like above-mentioned has to firstly get physical access to one of the computers from the network, the first solution is to better control external workers, raise the standards of their inspection and ensure the best possible protection of technological equipment. Another security possibility is to examine every supplier of even the smallest parts of network equipment and to make sure they are reliable, cause their equipment is going to access huge amount of secret data.

If the request is valid then it is further checked for other attacks, otherwise it is blocked and stored in the log with the attack type that is found in that request. In HTTP request smuggling attack, a malicious request contains multiple start lines that are not allowed in one HTTP request (violation of RFC 2616). When the hacker tries to assign multiple start lines to one request, it will be detected by the system analyzer and reported as an HTTP request smuggling attack. A buffer overflow is the computing equivalent of trying to pour two liters of water into a one-liter pitcher, some water is going to spill out and make a mess. A buffer (or array or string) is a space in which data can be held.

CHALLENGES OF PROLIFERATION BIOMETRIC TECHNOLOGY Despite the numerous benefits of deployment of biometric technology to identification systems, it major disadvantage is that it is prone to vulnerabilities attacks either at the user interface or between modules or on the database template. Some of these attacks (Anthony & Mary, 2011)are highlighted as follow:  Replay attacks  Spoofing  Tampering  Substitution attacks  Trojan Horse attacks  Overriding yes/no  Masquerade attack Over time biometric encryption is used as a solution to biometric security threat(Cavoukian & Stoianov, 2007),(Jain, Nandakumar, & Nagar, 2008). Biometric encryption is either symmetric or asymmetric. The process in which a single key is used for the purpose of encryption and decryption is known symmetric encryption. Whereas, asymmetric encryption involves the use of two different but related keys-the encryption key, and decryption key However, some Information Communication Technology experts have criticised the fact that several agencies are deploying biometric technology in their operations.

Federated identity management makes use of an authentication mechanism known as single sign-on. Users only make use of one set of credentials and are automatically granted access to multiple systems. Federated identity management introduces increased concern for security and privacy as “it shares valuable information across domains using loosely coupled network protocols” (Maler & Reed, 2008). The internet is an interconnection of networks and is not owned by anyone, therefor anything that operates on the internet is a concern for security. Benefits of federated identity management Federated identity management enables organisations to collaborate, assign single identity to employees for accessing multiple services.

Because of vulnerability of system allow to unauthorized person to access the confidential information or data . Because of unauthorized access the confidentiality of information get break. So, biometrics is a good technique to maintain the security of the confidential data. Biometrics refers to the physical and behavioral characteristics of the human. Such as face recognition, voice, gait, finger print, palm

Cryptography is a technique or method to secure personal data from unauthorized user. In cryptography two types of operation are performed. (i) Encryption and (ii) Decryption. To encrypt and decrypt data a secret key is used. After encryption original data is converted into another format known as cyphertext, which is not easy to understand.

Q5) (a) Password policy: SQL Server verification server login and secret key approach can apply. Login and secret word are not the same regarding security is extremely viable. SQL new businesses • SQL server administration studio gives three choices for the above logins • Implement secret key strategy • Keeping in mind the end goal to keep up the security of information, we can change the secret key or are made, when the need to put a touch befuddling. • at the point when the approach is empowered all the prerequisite ought to be meet • Eight characters ought to be in the secret word • The secret word must incorporate the capitalized letters (A –Z), lowercase letters (a-z), numbers (0-9), non-alphanumeric characters like outcry point (! ), at image (@), dollar ($) and so forth.

The government, criminals, ... Although the exit node providers don 't know who is sending & requesting the traffic being redirected through their node, they can use the data they can "phish" this way against you anyway. Furthermore it is pretty easy to figure out who you are by simply interpreting the recorded packages. An alternative to Tor and similar services are VPN services. Same problem applies here: The VPN service provider can easily view your unencrypted traffic & use it against you.