Название: Cybersecurity Explained: With security tools and techniques (Volume Book 1)
Автор: J.A. Poppen
Издательство: Amazon.com Services LLC
Год: 2020
Язык: английский
Формат: pdf, azw3, epub
Размер: 10.1 MB

Cybersecurity has become progressively important to the average user of the cyberspace. The increased opportunities allowed by today's technology also bring about new security worries that must be checked. Organizations need to be conscious of the complication in using today's Cyber technology, where an increasing number of average items in use is being connected to the Internet. Safeguarding information has become one of the biggest challenges in the present day where Cyberattacks and crimes are growing immensely day by day.

Several Governments and organizations are taking some measures in order to forestall these Cybercrimes. Information is essential assets of any organization, and it needs to be well protected against illegal access, reproduction, and manipulation from internal and external sources. In this context, a network/system administrator need to 'test' the systems by putting themselves in the attackers’ position and try to understand the network posture. Thus, identify how crackers acts and what they look for in the systems. This is what penetration testing and vulnerability assessment aims to achieve by using the same tools which crackers use, such as Nmap, Nessus Metasploit, etc; to assessing the actual security level of the computer system against attacks.

Penetration testing is a controlled attempt at penetrating a computer system or network in order to detect vulnerabilities. It deploys the same or similar tools and techniques as those used by crackers. To buttress this, they describe penetration testing, in some cases to be emulating the activities of a hacker, by probing and searching for ways to circumvent or bypass controls, and searching for vulnerabilities in the target organization’s electronic communication parameter. Hence penetration testing can be said to be a process of attempting to gain access to resources without knowledge of user details names, passwords and other credentials of access.