Understanding of security, Threat and the Immediate Mitigation

Understanding of security, Threat and the Immediate Mitigation

Threat : A threat, in the context of computer security, refers to anything that has the potential to cause serious harm to a computer system. A threat is something that may or may not happen, but has the potential to cause serious damage. Threats can lead to attacks on computer systems, networks and more.

What is brute force attack : In cryptography, a brute-force attack consists of an attacker submitting many passwords or passphrases with the hope of eventually guessing correctly. The attacker systematically checks all possible passwords and passphrases until the correct one is found .

What are the differences between brute force and dictionary attacks ?

A dictionary attack means that you probe only passwords/keys from a dictionary (which does not contain the complete keyspace). A brute force attack is primarily used against the encryption algorithm itself (you can also use this against passwords but there you use dictionary attacks most time).

A Brute Force Attack is the simplest method to gain access to a site or server (or anything that is password protected). It tries various combinations of usernames and passwords again and again until it gets in. This repetitive action is like an army attacking a fort.

Now, you’ll think: “Wow that’s easy, I can do that too.”

You can try it out for sure!

Usually, every common ID (for e.g. “admin”) has a password. All you need to do is try to guess the password. Let’s say if it’s a 2-digit-pin, you have 10 numeric digits from 0 to 9. This means there are 100 possibilities. You can figure this out with pen and paper like Mr. Bean who tried to find correct last two digits of the phone number of the lost kid’s father in the movie, Mr. Bean’s Holiday.

What to do now?

There are many tools available for securing different applications which will deny a user after a predefined number of attempts.

For example, for SSH we can use Fail2ban or Deny hosts. These programs will deny the IP address after a few wrong attempts. These tools do a good job. However, there is a twist to all this.

you can take some precautionary measures like :

Password Length : The first step towards Brute Force Attack prevention should be longer password length. Nowadays many websites and platforms enforce their users to create a password of certain length (8 – 16 characters).

Password Complexity :- Another important thing is to create a complex password. Passwords like ‘ilovemycountry’ or ‘password123456’not recommended. password should consist of UPPERCASE and lowercase alphabets and should also have numbers and special characters. Complexity of the password delays the cracking process.

Using Captcha : Captchas are now commonly used in websites. They prevent bots from executing automated scripts mainly used in Brute Force attack. Installing captcha in your WordPress site is fairly easy.Install Google invisible reCaptcha plugin and link in to your Google account. Now go back to plugin setting page and define the places where you would like the user to get captcha first before performing the actual task.

Two Factor Authentication : Two Factor Authentication is an extra line of defence which can defend your account from Brute Force Attack. Chances of successfully executing Brute Force attack on 2FA protected sites are very thin. There are various ways to implement 2FA in your WordPress site.


Other best practices are:

Unique password for each account.

Frequent password change.

Avoid sharing credentials through insecure channels.

Use a firewall

Document your cyber security policies

Educate all employees

Enforce safe password practices

0   0
Sangita Singh
profile inserts 23rd April 2024

We has a set of standards of carbide inserts and cutting tools in the tooling, milling, and other Vargus Inserts industries. With part quality, high-tech equipment, and quality test system, and excellent customer service, customers Seco Inserts rely on us, both Tungsten Carbide Inserts local and international customers.

Write a comment ...
Post comment
Cancel
profile Angel 20th April 2024

This is a beneficial blog. Thanks for sharing. cash for junk cars cambridge

Write a comment ...
Post comment
Cancel
profile Nguyen 17th April 2024

The betting playground is gradually becoming more vibrant than ever with a series of bookmakers from all over. Here, hb88 bookmaker emerged as a central game hall that was warmly received by players across the country. Click here to go to the website Readmore: tải app hb88

Write a comment ...
Post comment
Cancel
profile Nguyen 10th April 2024

The online game betting market is becoming more vibrant than ever with a series of bookmakers being introduced to Vietnam. In which, i9bet stands out with its new way of operating the game, attracting a large number of supporters from bettors everywhere. Today we introduce i9bet - the most popular bookmaker today. Readmore: đăng ký i9bet

Write a comment ...
Post comment
Cancel
profile Nguyen 10th April 2024

bj38 is known as one of the newest and most reputable bookmakers in 2024 in Asia. Website bj38 will share all necessary information for those who need it. This is bj38's latest homepage - please click here Readmore: tải app bj38

Write a comment ...
Post comment
Cancel
profile Nguyen 10th April 2024

8kbet is known as one of the leading bookmakers in Asia. Operating from 2018 until now. The 8kbet website has attracted nearly 1,000,000 member registrations. Therefore, 8Kbet provides a lot of useful information for those who need it. This is the latest homepage of 8kbet - please click here Readmore: 8kbet

Write a comment ...
Post comment
Cancel
profile Nguyen 10th April 2024

789win is known as one of the leading bookmakers in Asia. The 789win website will share all the necessary information for those who need it. This is 789win's newest homepage - please click here Readmore: 789win

Write a comment ...
Post comment
Cancel
profile Nguyen 5th April 2024

Your article is really useful to me. I feel the need to provide more information to others if they need more information. Click on the link next to this Readmore: vl88

Write a comment ...
Post comment
Cancel
profile Nguyen 4th April 2024

77bet is known as one of the leading bookmakers in Asia. The 77bet website always brings useful information to you. This is the most prestigious bookmaker in Asia, known by many gamers Readmore: 77bet.homes

Write a comment ...
Post comment
Cancel
profile Nguyen 3rd April 2024

I9bet is known as one of the leading bookmakers in Asia. The i9bet website will share all the necessary information for those who need it. This is i9bet's newest homepage - please click here Readmore: nạp tiền i9bet

Write a comment ...
Post comment
Cancel
profile Nguyen 2nd April 2024

After study many of the blogs on your website now, and that i truly much like your technique of blogging. I bookmarked it to my bookmark internet site list and will be checking back soon. Readmore: 79king

Map: 94 Đ. Cộng Hòa, Phường 4, Tân Bình, Thành phố Hồ Chí Minh Việt Nam

Hotline: 0358212545

Website: https://79king.college/

Email: 79kingcollege@gmail.com

Hastag: #79king#79kingcollege #trangchu79king #caccuoctructuyen

Write a comment ...
Post comment
Cancel
profile Nguyen 1st April 2024

The i9bet website will answer the questions asked in the above article. There are articles in this that make better sense. Please click this link for more details Readmore: i9bet

Thông tin liên hệ:

Website: https://i9bet.shop/

Email: i9betshopp@gmail.com

Phone: 0358212567

Hastag: #i9bet #i9betshop #trangchui9bet #caccuoctructuyen

Map: 278 Đ. Gò Dầu, Tân Quý, Tân Phú, Thành phố Hồ Chí Minh Việt Nam

Write a comment ...
Post comment
Cancel
profile Nguyen 30th March 2024

After studying many blogs on your website, I really like your technique of blogging. I have watched it over and over again, and feel it is very realistic, thank you very much for your article. Readmore: cwin

Map: 76 Nguyễn Sơn, Phú Thọ Hoà, Tân Phú, Thành phố Hồ Chí Minh, Việt Nam

Hotline: 0946444544

Website: https://cwin.skin/

Email: cwinskin@gmail.com

Hastag: #cwin #cwinskin #nhacaicwin #linkvaocwin #dangkycwin

Write a comment ...
Post comment
Cancel
profile Nguyen 28th March 2024

i9bet is known as Asia's leading reputable bookmaker. With up to 100,000 players per day. Includes quick deposits and withdrawals for bettors to play freely. - please click here Readmore: i9bet

Thông tin Liên hệ:

Website:  https://i9bet.yachts/

Phone: 0901232567

Hastag: #i9bet #i9betyachts #trangchui9bet #gamei9bet

Địa chỉ: 340 Đ. Lũy Bán Bích, Hoà Thanh, Tân Phú, Thành phố Hồ Chí Minh Việt Nam

Write a comment ...
Post comment
Cancel
profile Nguyen 25th March 2024

Thank you very much! Because this is a very useful article for me. I received the right kind of information for my query. I have a project that I'm currently working on and I've been keeping an eye out for such information. This is the website containing that information. Readmore >>>33win

Map: 100 Phan Văn Hớn, Tân Thới Nhất, Quận 12, Thành phố Hồ Chí Minh, Việt Nam

Hotline: 0368988888

Website: https://33win.pics/

Email: 33winpics@gmail.com

Write a comment ...
Post comment
Cancel

Please rotate your device

We don't support landscape mode on your device. Please rotate to portrait mode for the best view of our site