The next myth no one would want to attack your system.
It's hard to determine the origin of this myth.
In all probability you're letting a real world experience influence your perception a virtual security
you know that there are some districts who can walk safely through at night.
And you assume that your business computer network is very much like this safe well-lit area.
You don't have any low lives living in it and everything has always been all right geographical distance
is not a factor in the internet though.
Even if your neighborhood seems to live far from any threat it doesn't mean it'll be so in the next
10 seconds.
Ten seconds is a long time in the virtual computer systems world.
Where there are no boundaries or distance your neighbors can change very quickly.
Computer systems can be targeted with a number of different attack techniques.
The less sophisticated types of attacks are launched by so-called script kids people who rely on resources
found on the internet for their exploits
they launch codes and tools developed by other people to have fun watching the results of their juvenile
actions.
These results could include computer hangs and gaining connection or control over targeted computers.
This is however only a small chunk of threats
script kids attacked blindly.
If you're done name has a popular name.
It's enough to make you a potential target.
Attacks that are targeted at specific systems are a much more serious threat if you consider your network
resources less valuable.
You probably won't be a direct target for big criminal groups targeted intrusions use computer systems
indirectly zombie networks or bot nets to avoid detection and further exploits.
This is a concern for all computers.
If your device is connected to the Internet there's a possibility it will become a zombie computer.
You won't be attacked because someone is itching to see your holiday photos.
You'll be attacked because your neutral computer can be used to send information or launch an attack
on a specific target.
There's always a risk that a spammer or attacker will want to exploit your system.
Another mis it's possible to successfully protect users from malicious and unwanted software
computer system administrators should set up a system in a way that protects users from running unwanted
software.
How can this be achieved.
You can only protect users through anti-virus software.
The drawback is that any viruses only detect a small portion of threats.
There's still a high risk that an unaware user will launch on his computer a malware file compiled for
specific needs.
This doesn't require knowing how to use an assembler or 16 years of coding experience.
All you need for this is to read a few articles on the Internet and choose a pre-made tool.
If administrators restrict security wise and blocked access to all software this would essentially replicate
the scenario from the first Miss.
The system would be more secure but would also be less functional and you can't afford to decline the
functionality
firewalls protect computers from all remote attacks is another of our myths.
You can see in the bottom part of the slide how a firewall looks.
From the standpoint of your computer system the picture shows names of protocols and the wrongs we are
interested in two of them.
The first from the bottom is you BP abbreviated from Universal firewall bypass protocol which is slang
for HTP the HGJ protocol has a secure variance as well.
TTP is also known as TTP secure.
Why are they represented in this way in the picture.
The majority of firewalls filter traffic based on port numbers or sessions and both methods are completely
ineffective.
It's easy to set up protocols other than HTP through port 80 or peer to peer applications do it.
That's why port 80 is open by default on firewalls port 443 a secure version of port 80 is a curiosity.
It allows you to pass all sorts of data through firewalls.
This works both ways as will discover in following modules and also disables the monitoring of traffic
administrators won't pay any attention to it because the data will be encrypted.
And as a result unreadable the data will all look the same whether it's encrypted credentials of lawful
users who visit a bank page or if it's a remotely downloaded customer database Farwell's have long ceased
to be an effective protection measure against remote attacks.
They're still important.
However although they can't fully be relied upon.
They still play their part in the protection scheme.