Question

Information Security Systems

1. Describe the phases of a computer attack.
2. Describe two tools and techniques to detect and prevent attacks.

Answer 1

Phases of a computer attack are:

• Reconnaissance: Doing preliminary research about the target (people or system)
• Weaponization: Creating Spear Phishing emails or fake login pages to glean confidential information (like passwords) and collecting the tools needed to perform further exploitation.
• Delivery: Sending phishing emails/ fake login pages to the target and wait for them to fall in.
• Exploitation: Upon successful retrieval of passwords, the attacker accesses the compromised account to explore the target network.
• Installation: Manipulating the account/system to ensure a longer stay in the system.
• Command and control: Impersonation/ downgrading user privileges are some of the actions in which the hacker commands and controls the system.
• Action on objectives: The final objective of the hacker is achieved.

2 tools to detect and prevent attacks are firewalls (to block access to a suspicious application) and antivirus (for overall protection from viruses)

2 techniques to prevent attacks are keeping antivirus up to date and changing passwords frequently.