FULL NAME: - Atharva Satish Shinde.
PRN NO: - 1930403246085.
COURSE: - Information Technology.
YEAR/SEM: - Third Year/5th Sem.
SUBJECT NAME: -CNS.
ASSIGNMENT NO: - 01.
ROLL NO: - 2191983.
Prepare for your exams
Study with the several resources on Docsity
Earn points to download
Earn points by helping other students or get them with a premium plan
Guidelines and tips
Prepare for your exams
Study with the several resources on Docsity
Earn points to download
Earn points by helping other students or get them with a premium plan
In this we are going to learn about the java program, Assignments of Java Programming
All about our jab program. Now a days due to pandamive all the class are going like this only.
Typology: Assignments
2020/2021
1 / 17
This page cannot be seen from the preview
Don't miss anything!
Related documents
Partial preview of the text
Download In this we are going to learn about the java program and more Assignments Java Programming in PDF only on Docsity!
FULL NAME: - Atharva Satish Shinde.
PRN NO: - 1930403246085.
COURSE: - Information Technology.
YEAR/SEM: - Third Year/5th Sem.
SUBJECT NAME: - CNS.
ASSIGNMENT NO: - 01.
ROLL NO: - 2191983.
SUBJECT: - CNS ASSIGNMENT NO: - 01
QUE 01: - What is the need of security in computing
environment?
ANS: -
Computer security basically is the protection of computer systems and information from harm, theft, and unauthorized use. It is the process of preventing and detecting unauthorized use of your computer system. There are various types of computer security which is widely used to protect the valuable information of an organization. OneOne way to ascertain the similarities and differences among Computer Security is by asking what is being secured .For example: - •Information security is securing information from unauthorized access, modification & deletion. •Application Security is securing an application by building security features to prevent from Cyber Threats such as SQL injection, DoS attacks, data breaches and etc. •Computer Security means securing a stand alone machine by keeping it updated and patched. •Network Security is by securing both the software and hardware technologies.
QUE 02: - Explain The Types Of Security Attacks?
ANS: -
In computer networks and systems, security attacks are generally classified into two groups, namely active attacks and passive attacks. Passive attacks are used to obtain information from targeted computer networks and systems without affecting the systems. There are two types of Passive Attacks: - •Release of communication content: If the communication contains sensitive data, such as card holder data, this type of passive attack reveals sensitive information. •Traffic Analysis: This type of passive attack is applied to masked communication content, where capturing the content is not enough to extract sensitive information. Encryption is away to mask network communications. Simply, an intruder observes the frequency of network traffic and then it guesses the nature of the traffic to extract useful information regarding sensitive data. There Are Four Types of Active Attacks: - •Replay: An intruder captures communication data and retransmits the captured data for creating unauthorized traffic. •Masquerade: An intruder pretends to be a legitimate user. This attack is accomplished with some other active attacks.
•Modification of Communication Content: Some parts of communication content are modified, delayed, or reordered to produce an unauthorized effect. •Denial of Service: This attack prevents normal behavior of Computer Networks and Systems and services running on these systems. This attack has diverse targets and it is one of the most commonly seen attack types on Contemporary Computer Networks and System.
QUE 03: - Which Are The Network Security Services?
ANS: -
There are quite a few different networking security tools you can incorporate into your line-up of services. The following list is by no means exhaustive, but available security tools can include:
- Access Control: - This refers to controlling which users have access to the network or especially sensitive sections of the network. Using security policies, you can restrict network access to only recognized users and devices or grant limited access to noncompliant devices or guest users.
- Antivirus and Anti-Malware Software: - Malware, or “malicious software,” is a common form of cyber - attack that comes in many different shapes and sizes. Some variations work quickly to delete files or corrupt data,
security tools. Numerous threat vectors, like scams, phishing, malware, and suspicious links, can be attached to or incorporated into emails. Because so many of these threats will often use elements of personal information in order to appear more convincing, it is important to ensure an organization’s employees undergo sufficien t security awareness training to detect when an email is suspicious.
- Mobile Device Security: - The vast majority of us have mobile devices that carry some form of personal or sensitive data we would like to keep protected. This is a fact that hackers are aware of and can easily take advantage of.
- Web Security: - Web security software serves a few purposes. First, it limits internet access for employees, with the intention of preventing them from accessing sites that could contain malware. It also blocks other web- based threats and works to protect a customer’s web gateway.
QUE 04: - How To Process The Secure Email
System?
ANS: -
- Use Two-factor Authentication: - The basic principle of two-factor authentication is simple: combine something you know with something you have. One example is a debit card, which requires you to have both your physical card and your PIN to verify your identity. By enabling two-factor authentication (or two-step verification ), you aren’t putting all of your faith in a password.
- Limit Forwarding: - When we’re sent a message we want to share, we often click “Forward” without thinking about the consequences. Where is the message going? Who will see it? Where will it be stored? If your email is hosted on a corporate server, it is likely there are certain security measures in place to protect any sensitive information contained in your private email.
- Set Expiration Dates On Your Messages: - While some of us can’t stand a mess y inbox, the average user doesn’t bother cleaning up their private email, often seeing deleting email as a waste of time.
QUE 05: - Explain The Secure Email Services?
ANS: -
Email security is a term for describing different procedures and techniques for protecting email accounts, content, and communication against unauthorized access, loss or compromise. Email is often used to spread malware, spam and phishing attacks. Attackers use deceptive messages to entice recipients to part with sensitive information, open attachments or click on hyperlinks that install malware on the victim’s device. Email is also a common entry point for attackers looking to gain a foothold in an enterprise network and obtain valuable company data. Email encryption involves encrypting, or disguising, the content of email messages to protect potentially sensitive information from being read by anyone other than intended recipients. Email encryption often includes authentication. Email was designed to be as open and accessible as possible. It allows people in organizations to communicate with each other and with people in other organizations. The problem is that email is not secure. This allows attackers to use email as a way to cause problems in attempt to profit.
Whether through spam campaigns, malware and phishing attacks, sophisticated targeted attacks, or business email compromise (BEC), attackers try to take advantage of the lack of security of email to carry out their actions. Since most organizations rely on email to do business, attackers exploit email in an attempt to steal sensitive information.
QUE 06: - Which Are The Threats In Email System?
ANS: -
- Phishing: - Email phishing is a security attack used by cybercriminals who use it in an attempt to steal sensitive business information. This type of data includes usernames and passwords of CEOs, CFOs and other senior management, details about financial accounts or valuable information which can be sold to competitors. Phishing emails are often masked by official emblems of the company and usually target vulnerable accounts and lower-level employees. In most cases, these malicious emails contain links to sites that dispense malware. The best protection against such an attack is a surveillance network that monitors communication in and out of the company.
until the financial demand (ransom) is paid to the perpetrator. Threats to email security like this usually happen during other large-scale attacks when multiple users are targeted inside the company.
- Directory Harvest Attacks: - A directory harvest attack (DHA) is an email threat carried out by spammers which has a goal of accessing the email database attached to a company domain. Although simple tactics like a dictionary attack are used, DHAs target both personal and commercial information, inflicting massive damage across a large enterprise. Using a Mail Protection Service (MPS) protects email accounts from any DHA attempts. By integrating the DHA feature onto the security server, technical staff will receive notification if someone is attempting to breach email security.
QUE 0 7 : - Define The Term Encryption With
Diagram?
ANS: -
- Encryption is the process of converting data to an unrecognizable or "encrypted" form. It is commonly used to protect sensitive information so that only authorized parties can view it. This includes files and
storage devices, as well as data transferred over wireless networks and the Internet.
- You can encrypt a file, folder, or an entire volume using a file encryption utility.
- Encryption is also called as the method by which information is converted into secret code that hides the information's true meaning.
- You may also called Encryption as the process of translating plain text data (plaintext) into something that appears to be random and meaningless (ciphertext).
DIAGRAM: -
QUE 0 9 : - Which Are The Different Types Of Threats
In A Network?
ANS: -
➢ The Different Types Of Threats In A Network Are As Follows: -
- Malware: - Software that causes unintentional harm due to some deficiency is typically described as a software bug.
- Viruses: - A computer virus, is designed to spread from host to host and has the ability to replicate itself.
- Spyware: - Spyware is any software that installs itself on your computer and starts covertly monitoring your online behavior without your knowledge or permission.
- Adware: - Software that automatically displays or downloads advertising material such as banners or pop- ups when a user is online
- Trojan horses: - A Trojan horse is a type of malware that downloads onto a computer disguised as a legitimate program.
- Worms: - A computer worm is a standalone malware computer program that replicates itself in order to spread to other computers.
- Phishing: - Phishing is a type of social engineering attack often used to steal user data, including login credentials and credit card numbers. It occurs when an attacker, masquerading as a trusted entity, dupes a victim into opening an email, instant message, or text message.