Skip to main content

Posts

Showing posts with the label Security

Secure Network(Week 4)

Network hardening is the process of securing a network by reducing its potential vulnerabilities through configuration changes and taking specific steps.   Implicit deny is a network security concept where anything not explicitly permitted or allowed should be denied. Analyzing logs is the practice of collecting logs from different networks and sometimes client devices on your network, then performing an automated analysis on them. Correlation analysis is the process of taking log data from different systems and matching events across the systems. Flood guards provide protection against Dos or denial of service attacks. EAP-TLS is an authentication type supported by EAP that uses TLS to provide mutual authentication of both the client and the authenticating server.   if you really want to lock down your network, you can implement 802.1x . DHCP Snooping Attack Why WEP Encryption fall apart? A general concept in security and encryption is to never send the plain ...

Authentication Authorization Accounting(week 3)

Identification is the idea of describing an entity uniquely. Biometric authentication is the process of using unique physiological characteristics of an individual to identify them. C.R.L(Certificate revocation list) :This is a signed list published by the CA which defines certificates that have been explicitly revoked. Lightweight Directory Access Protocol(LDAP): LDAP is an open industry-standard protocol for accessing and maintaining directory services. Authentication is related to verifying the identity a user, authorization pertains to describing what the user account has access to or doesn't have access to. An access control list or ACL , is a way of defining permissions or authorizations for objects.  RADIUS or Remote Authentication Dial-In User Service , is a protocol that provides AAA services for users on a network.It's a very common protocol used to manage access to internal networks, WiFi networks, email services and VPN services. when a client wants to access a r...

Will Quantum Computer replace Classical computer?

I would like to start this topic with 2 facts: 1.Classical computer have enabled amazing things. Like the internet, communication and many more. 2.But There are still problems that we can’t solve. Classical computer fundamentally works on Binary bits i.e. 0’s and 1’s. Major drawback of classical computer in some field is that it checks one instruction at a time. And in some high-level mathematical problems checking 1 instruction at a time can take thousands of years to complete the problem because of less computational power. Here to overcome this problem companies like IBM Google Intel Microsoft and many more are developing the new type of computer called quantum computer in which they have some what had successful. Even Government of India is making effort to develop Quantum Computer. In the Budget   2020 Government of India has allocated 8000 crore for the application of Quantum Computer. So, what is Quantum Computer? Quantum computer are those comp...

Deep Learning

Deep learning is a machine learning technique that teaches computers to do what comes naturally to humans: learn by example. Deep learning is a key technology behind driverless cars, enabling them to recognize a stop sign, or to distinguish a pedestrian from a lamppost. It is the key to voice control in consumer devices like phones, tablets, TVs, and hands-free speakers. Deep learning is getting lots of attention lately and for good reason. It’s achieving results that were not possible before. Deep learning is neural network (Neural networks are a family of learning algorithms that use a "network" consisting of multiple layers of inter-connected nodes) which use to classify the unlabelled and unstructured data. Deep learning models are trained by using large sets of labelled data and neural network architectures that learn features directly from the data without the need for manual feature extraction. One of the most popular types of deep neural networks is ...

Machine Learning

Machine Learning is undeniably one of the most influential and powerful technologies in today’s world. More importantly, we are far from seeing its full potential. There’s no doubt, it will continue to be making headlines for the foreseeable future. Creating a computer system which automatically improves with experience is what machine learning all about . Machine Learning is a branch of artificial intelligence based on the idea that systems can learn from data, identify patterns and make decisions with minimal human intervention. It was born from pattern recognition and the theory that computers can learn without being programmed to perform specific tasks. Two of the most widely adopted machine learning methods are supervised learning and unsupervised learning – but there are also other methods of machine learning. Here's an overview of the most popular types. 1.       Supervised learning   algorithms are trained using labelle...

Can machine think?

In the previous, blog we understood the difference between Artificial Intelligence, Machine learning and Deep learning. If you haven’t read it yet I recommend you to read it first. Now let start with today’s topic. A.I. (Artificial Intelligence) is broad branch of computer science, the goal of A.I. is to create the system that can function intelligently and independently. The concept of A.I evolved during world war 2 to break the code message sent by German. The name of the machine was enigma. It work was to decrypt the code sent by German. There a movie created on the basis of this topic. The name of the movie is "The Imitation Game”. It’s a nice movie if you interest in A.I then you should watch it. This is how the evolution of A.I. started. With the help of A.I. we are trying to create a machine which can think like human. A.I. system is created similar to human brain. Human brain can lean by reading, seeing and though experience, similarly A.I. a...

Port Forwarding

Your friend wants to connect to your computer using RDC (remote desktop connection).   Friend send request to your computer for Remote Desktop Connection to your public IP address with specific port number. A port is logical connection is used by program and service to exchange information. Ports uniquely identify    this program and services that are running on a computer. In this case remote desktop connection uses 3389. So, the request will make a way from computer to your router. Now you need to know where to forward the request for port 3389 because without any port forwarding configured your friend will not be able to connect because your router doesn’t know what to do with this request this is where port forwarding comes into play .So now we our going to tell our router to send or forward any request that is coming from 8339 and send to this computer. To do this we need to login into our router configuration page by in the routers internal IP a...

How the Router works?

Router is device which forward data packets from the device to the internet and bring the requested data packets from the internet to the device, accurately. Router is the gateway of the internet . Router is used for the purpose of splitting the signal to share it, with more then one devices at the same time. To understand the concept of the router ? How it works? Let’s take an example, suppose you have to post a letter to your friend living in Delhi. For that you have to mention postal address in the letter. And post in the post box. From the post box it goes to the nearest post office from their it goes to nearest post office of the mentioned postal address. Now post office send this letter to the destination. Now, in this example consider letter as “ data packets ” and postal address as “ IP address ”, post office as “ router ”. Imagine the same scenario what will happen: When you request for some on internet data packet is send to the router with...

Bitcoin mixer Service

As we know bitcoin was created to keep user information private. But as the time pass people discovered that bitcoin isn’t as anonymous as most of the user think. So, to improve Bitcoin anonymity, bitcoin mixer service is created. How this service works? Let’s take an example assume you want to make banana milk shake. For making milk shake, firstly you have to cut banana into small pieces and then put it into mixer and add some milk into it, next start the mixer after minute milkshake is ready. Now you can’t differentiate banana and milk. Similar happen in bitcoin mixer. Banana are your bitcoin and milk is other user’s bitcoin who uses bitcoin mixer and banana milkshake is the output of mixer, where you can’t differentiate your bitcoin and other user’s bitcoin. In short, Bitcoin mixing service breakdown your bitcoin into smaller, different parts. Next they mix them up with coin from other address is that third parties will find extremely difficu...

Is Bitcoin fully anonymous?

Bitcoin is not entirely anonymous. Each user has public address that can be tracked theoretically, through proper network analysis.       Bitcoin are stored in wallet and wallet have your personal data. When we transfer bitcoin, a message is broadcast In public about the transaction, we declare that bitcoin in been exchange so that miner can confirm our transaction and put it in the bitcoin blockchain network. This data is publicly broadcast and permanently stored on the bitcoin blockchain which has the address from where it came from and amount transfer. Using this hacker can reach to your wallet and get all personal detail, amount of bitcoin you have, and also have access to see your future transaction. To remain private though, this thing bitcoin mixing was introduced. How bitcoin mixer works? How it maintains our privacy? That will be explained in the next blog. Thanks for reading the content. If you like the content share it...

What is Malware?

Malware: When we think about malware, we say it’s a sort of virus, which not true in technical point of view. So, terminology is “Virus is type of Malware”. You would have encounter unexpected ads on your screen will surfing on web or sudden sound played, they are malware so stay always from this type of site. Malware is malicious code which is created with an intended of harming your computer system or stealing your personal data as well as for creating money through the malware by selling it to at highest bid on the dark web or by asking directly to from the victim for get rid of the malware. Common Type of malware: 1. Ransomware This malware gets into the system, encrypt and block access of the data and the key is sent to the hacker. To regain the access hacker, ask for an amount of money from the victim. The payment for this type pf things is done through cryptocurrency because they are untraceable. 2.Spyware. Spyware spy your acti...

How Google Authenticator app works?

In our previous blog we talk about 2-Factor authenticator app. So, I thought let know about the algorithm it work on. The TOTP algorithm generate single time password also known as token which are only valid for a certain period of time. This generated token are depend upon shared secret key. This algorithm was published as RFC 6238 by Internet Engineering Task Force (IETF) . TOTP is extension of HMAC based OTP algorithm. This algorithm is used by 2-factor authentication app for creating dynamic pattern of code. Without any further due let’s hope into it. Before getting started let me introduce you to a term called "Unix Epoch Time" . Unix Epoch Time (T(Unix)) is the m=number of second that elapsed(passed) since 1 Jan 2017 00:00:00 UTC not counting leap second. TOTP Algorithm: 1. Assume a date and time at which you want the code. So, I take 4 Dec 2018    12:24:20 T(Unix)=1543926260 Sec N=floor (T(Unix)/sec) N=counter which tell...

How to stay secure?

We are living in an era where technology is developing at a great pace and due to these security issues are also increasing day by day. Due to which our privacy is no longer private. I wouldn’t speak out the name because I will be judgmental. So, in this I will tell you how you can remain secure up to an extent. Becoming completely anonymous is difficult . Without a further due let’s see my ways to remain secure and private. Note: Here I will tell you about bot PC as well as Smartphone but majority of content will be concentrating on PC 1.       Update your PC and Smartphone. 2.       Admin privileges 3.       Browser 4.       2-step verification. 1. Update your PC and Smartphone. By this mean to say always keep your system and apps up to date. Whenever they push an update do it. That’s for your benefit. Why this important is because majority o...