Question

Gartner reports that "risk management leaders say digital privacy regulation is the top emerging risk on their radar". What types of digital privacy risks do you see in your or another organization and what should an organization do to predict and measure these risks?

Neeed 400 words

Answer 1

In an organization, many digital privacy risks affect the environment of an organization. Some of them are-

Denial of Service attack- These attacks target the traffic or send information that triggers to crash the server. It mostly attacks banks, trading, and other government and commerce organization. DoS uses two general methods to attack in any organization that is-Flooding in services and Crashes the services.

In this attack, it quite impossible to detect the attacker's location. In an organization, it is more difficult to shut down all the machine at once which cause major disruption the services.

Prediction-

• DDoS attacks, such as abrupt changes in traffic, stream dis-symmetry, distributed IP addresses of the source and IP addresses of the target.
• In this attack single particular machine can deal with multiple network requests against a network that is being targeted.
• DDoS attacks are like spy in the traffic that easily analyse DDoS attacks.

Measure-

• Limit the router that can easily prevent the web servers.
• Add a filter in the router, use time-out open-half connection and set lower SYN, ICMP and UDP flood drop threshold.
• Allow ISP and hosting provider to protect from DoS attack.

Hacking and Phishing- In an organization, hackers access sensitive information that harms the reputation of the business. hackers also damage the website by viruses that destroy data and security of the web server. Phishing hackers easily access the confidential information of the organization and other time-sensitive data that can be maliciously used against the organization. It can easily harm data protection and access the server of an organization in an unauthorized manner.

Prediction-

• In an organization, it is hard to predict the attackers as they are traces with their mask
• They often use malicious activity to be done suspiciously and sometimes they can be easily uncovered by the malicious emails, pop-ups or malicious software

Measures

• Use full-disk encryption tools so that the data is safe and secure.
• Use malware detection software like Norton Toolbar, which also keeps system software updated and secure.
• Backup the system and regularly check the server, accounts, and others that are most important for the organization.

Wireless network - In an organization, Public Wi-Fi networks (those with a pre-shared key for this), do not have any level of security or legal obligation to protect your computer or information.

Karma tool used to Man-in-the-Middle (MITM) methods to search, check, and attack wi-fi networks and browse all the browsing history, cookies, passwords, and hashes. This can be like an attack in the password and exploit the organization's information. Some of the Wif-Fi tools that are used to attack the wireless network- Hak5's, WiFi Pineapple, Pwine, Snoopy and many more.

Prediction

• Due to poor implementation the attackers can easily attack the wireless network either it is related from public or private network.
• Due to security flaw sometimes, it is unable to predict the attacks that easily exploit the overall network.
• With web interfaces attackers access the access point and attack within the network which is quite impossible to predict an analyse.

Measure-

• Use Wi-Fi encryption methods such as PSK, Enterprise, EAP, to secure the Wi-Fi with high strength protected password.
• Set SSID securely and use port security or Port-based Access Control

Explanation:

Digital privacy refers to the protection of a particular information while using internet or personal devices. Some of the digital privacy that can improve digital privacy risk are -

• Use Cloud encryption and disk encryption.
• Check the permission of any application in an Android or in iOS.
• Disable digital assistants such as Siri, Google Now and Cortana.
• Get know all the privacy setting related to system and social network.

DoS assaults can also be profitable for hackers where it used to shake businesses from thousands to millions of dollars everywhere.There is no single way to avoid hacking or phishing attacks entirely, but using the prevention of attacks might reduce the organization to get rid of becoming a target of a cyber-attack.