Question

. What is the "attack surface" of a machine or network? . Why is a person considered part of the "attack surface"? What is system "hardening"? Give two examples of how to reduce an "attack surface" using hardening? Why do we log events in systems and networks?

Answer 1

ANSWER

1)

ATTACK SURFACE

The attack surface of a software situation is the entirety of the distinctive focuses (the "attack vectors") where an unapproved client (the "attacker") can attempt to enter information to or separate information from an environment.[1][2] Keeping the attack surface as little as conceivable is a fundamental safety effort.

Attack surfaces can be isolated in to a couple of classifications:

The network attack surface.

The software attack surface.

The physical attack surface.

2)

Person is consider as the surface attacker because

• Physical surface attacker is based on the connection vulnerabilities which are made by the human.
• Network surface attck is based on the ports and access which are used by the human.

These are some of the examples that we can sat person is the main source of surface attacks.

3)

In registering, hardening is typically the way toward securing a system by decreasing its surface of defenselessness, which is bigger when a system performs more capacities; on a basic level a solitary capacity system is more secure than a multipurpose one. Diminishing accessible methods for assault regularly incorporates changing default passwords, the evacuation of pointless programming, superfluous usernames or logins, and the handicapping or expulsion of pointless administrations.

4)

These are the some of the examples and methods which can reduce the surface attack by hardening methodologies

• Keeping security patches updated
• Installing firewall
• Closing certain ports
• Not allowing file sharing among programs
• Installing virus and spyware protection
• Creating strong passwords
• Keeping a backup
• Disabling cookies
• Using encryption when possible

5)

IT Security is the name of the diversion and regardless of how enormous or little the span of your association, you will dependably contribute enough on securing certain parts of your IT organize. In numerous associations, it begins with observing your system for vulnerabilities that may enter the system to get to conceivably touchy data as security assaults.

The most ideal approach to decrease this is event log

In networking, an event log is an essential asset that gives data about system movement, utilization and different conditions. An event log stores these information for recovery by security experts or mechanized security frameworks to help organize chairmen oversee different angles, for example, security, execution and straightforwardness.

THANK YOU FOR THE OPPURTUNITY