Demystifying hacking attacks

Rakesh Thatha ArrayShieldMany organizations protect their infrastructure with a simple username and password. Entering this information grants access to organization’s sensitive data that is present in servers, databases, applications, email accounts, and other places. But it is widely acknowledged by Information Security Experts that passwords are notoriously insecure. Many users choose weak passwords which can be easily guessed or cracked. When password policies are enforced, users end up noting down their passwords on Post-It notes, mobiles, email or on their laptops which is serious security vulnerability.

In a nutshell, passwords are not sufficient for protecting organization’s data as
– Easy passwords can be cracked
– Random passwords can’t be remembered
– Same passwords are used at multiple places
– Passwords that needs to be continuously changed are not user-friendly

We are all aware that being careless with passwords, has resulted in organizations of all sizes including Fortune 500 and Government, witnessing multiple hacking attacks. This is a cause for concern when you consider the cost associated with a data breach has reached an estimate of $ 6.6 million.

Additionally, government regulations such as Sarbanes-Oxley, PCI Data Security Standard, US Data
Breach Notification Laws and others have been put in place to protect access to corporate networks.

Failure to meet requirements that call for the implementation of two-factor authentication could result in regulatory fines and irreversible damage to a brand’s reputation.

To understand more about hacking attacks, let us take a look at the various hacking vectors that compromise traditional authentication mechanisms.

Keyloggers: Keyloggers are applications or hardware devices that monitor a user’s keystrokes and sends this information back to the malicious user over internet. Hardware Keyloggers are small inline devices placed between the keyboard and the computer. The other kind of Keyloggers are Software Keyloggers, these are also referred as spywares. Spyware usually gets into the computer through banner ad-based software where the user is enticed to install the software for free.

Real-time replay attack: Malware sits inside a user’s browser and waits for the user to log into a bank. During login, the malware copies the user’s ID, password and OTP, sends them to the attacker and stops the browser from sending the login request to the bank’s website, telling the user that the service is “temporarily unavailable.” The fraudster immediately uses the User ID, password and OTP to log in and drain the user’s accounts.

Man in the browser attack: Malware overwrites transactions sent by a user to the online banking website with the criminal’s own transactions. This overwrite happens behind the scenes so that the user does not see the revised transaction values. This way, neither the user nor the bank realizes that the data sent to the bank has been altered.

Phishing: The attacker targets users and fools them into entering their credentials into a fake web site. This usually occurs when a criminal sends an email impersonating a customer service organization and asks recipients to click on a URL to perform account maintenance or verification. The link takes them to a fraudulent site, which prompts them for their valid credentials.

Pharming: The attacker poisons the DNS server and redirects users to the fraudulent web site. Users do not suspect anything because the redirect happens even when the user selects the web site from a saved favorite or actually types in the correct URL.

Shoulder surfing: Shoulder surfing is looking over someone’s shoulder, to get information about his identity. Shoulder surfing is an effective way to get information in crowded places because it is easy to stand next to someone and watch as they fill out a form. Shoulder surfing becomes a serious problem both in cases user enters password directly or if the user is entering the password through a virtual keyboard. In the case of virtual keyboard it is relatively easy for the hacker to see the mouse clicks on the screen.

Guessing: Guessing is the simplest attack that a hacker can do on a User Authentication system. One of the main problems with the username-password system is ‘selection of password’ itself. Studies show that users always pick passwords which are short and easy to remember. Often it is very easy to break the user’s password, if the personal information about him/her is known and more often than not, it is widely known

Social engineering: Social engineering is the act of manipulating people to reveal their private details, rather than by breaking in or using technical cracking techniques. Examples of the same is to access the user’s social media accounts or call them over phone and know more about the user personal details and possibly authentication credentials.

BruteForce attack: In a Bruteforce attack, an intruder or hacker tries all possible combinations to crack the secret of the user. The hacker will do an exhaustive search on the complete space to find the secret of the user.

Dictionary attack: Dictionary attack is improved version of Bruteforce attack. In Dictionary attack, instead of searching all possible combinations the hacker will search only the possibilities which are most likely to be selected by the user.

As we see, all the above mentioned scenarios make it very difficult for organizations to protect their sensitive data from the hands of hackers and competitors. Hence, security experts worldwide suggest the usage of a strong, two-factor authentication to protect organizations assets. The same is also recommended by various compliances/certifications like PCI-DSS, HIPAA, SAS 70, ISO 27001 and others. It’s only if organizations implement these suggestions will they be able to keep hackers at bay.

The author, Rakesh Thatha, is Co-Founder & CTO at ArrayShield Technologies. Rakesh’s Twitter handle is @rakeshthatha

Your say
Sign in to post a comment, or Sign up for an account.
Espere a que los informes de los servicios de laboratorio puede durar hasta un día. Los informes están disponibles en cuestión de minutos con la ayuda de pruebas de drogas en el lugar. Pruebas antidoping ... 23 Aug 2014, Alliya
This product is Awesome. I’m using it for about 4 or 5 months now and I have grown almost 2 inches & my parents are so happy with the results and I hope to be able to grow even more over the next few months.Step Up Height Increaser ... 22 Aug 2014, Alliya
I am very much pleased with the contents you have mentioned. I wanted to thank you for this great article.
Steuerberatung Neu-Ulm
... 21 Aug 2014, Ashleydanielle
Step up height increaser is really an impressive product. It provides whatever it promises to get you. I am using Step Up Height from one year and have increased my height too. It is definitely a musty buy product for you.Step Up height Increaser - Grow Taller Secrets ... 20 Aug 2014, Alliya
Height Gainer - Step Up Height Increaser is a wonderful product. I used it for a month and saw a notice able difference in myself. Now I don’t shy of going out with my friends etc. ... 20 Aug 2014, Alliya
I feel delighted to read such a good post, I would like to thank the Author for this marvelous efforts grow taller 4 idiots reviews | Remedios Caseros Para Bajar de Peso ... 17 Aug 2014, Darwinsmith
Your music is amazing. You have some very talented artists. I wish you the best of success.
target specific body parts using trouble spot training workouts
... 12 Aug 2014, Ashleydanielle
pada sebuah kehidupan berumah tangga pasangan selalu membutuhkan alat bantu sex
untuk menghindari seorang suami berselingkuh dalam perjalanan luar kota alangkah baiknya bawa bekal boneka sex | boneka full body atau alat bantu sexualitas pria minimal alat bantu sex pria dan alat bantu seksual pria
dan bagi pria atau suami yang penisnya sudah loyo pakai aja penis ikat pinggang penyangga jual alat bantu sex
untuk wanita yang maniak berhubngan intim tapi di tinggal pasangannya pakai aja alat bantu sex wanita
dan bagi wanita yang ingin berfantasi sex engan pasangannya alat bantu sexualitas wanita
jika anda mencari alat bantu wanita jangan ragu klik aja link ini alat bantu seks
kebanyakan orang dalam berhubungan intim mengunakan alat bantu seksual wanita atau alat seksual wanita
dan rata rata wanita yang doyan ngesex biasanya menggunakan alat sex wanita atau menggelitik anunya dengan sex toys untuk pria yang ingin mememuas kan pasangannya tapi malu karena penisnya kecil alat pembesar penis
bagi pria yang males pakai alat oalah raga penis bisa menggunakan obat pembesar penis atau pembesar penis yang bermerk neo size xl | vimax
dan kalau pria itu alat vitalnya sudah gede tapi spermanya kuran dan tidak subur bisa menggunakan obat penyubur sperma
jangan lupa saat berhubungan intim menggunakan kondom silikon polos | kondom bergerigi untuk menghindari penyakit gunakan juga kondom sambung silikon
bagi pria yang ingin memuaskan pasangannya gunakan obat tahan lama
obat perkasa cocok di gunakan bagi pria yang ingin berhubungan intim
untuk pria yang sudah loyo disarankan menggunakan obat kuat atau obat sex biar stamina badan selau terjaga obat vitalitas pria
seorang wanita yang dilihat pertama dari pemutih wajah dan body badan obat pelangsing dibagian penumbuh rambut itu juga mendukung pemutih gigi apa lagi tinggi semapai obat peninggi badan
bagi seorang wanita yang ingin memaksimalkan penampilan pemerah bibir atau ingin menghilangkan penghilang bekas luka atau perontok bulu
penting juga untuk pria maupun wanita yang ingin obat penggemuk dan membersihkan pemutih selangkangan atau menghilangkan pengghilang selulit
... 11 Aug 2014, Vimax
I like this site very much so much superb info .
http://www.rebelmouse.com/
... 10 Aug 2014, Ashleydanielle
This is a smart blog that post about Demystifying hacking attacks . I mean it. You have so much knowledge about this issue, and so much passion. imageprograf ipf8400 bij 2300galaxy note 10.1elgrand vipPenerimaan Anggota Baru 2014 Yapenbit ... 7 Aug 2014, Khaitoseven
I wanted to thank you for this excellent read!! I definitely loved every little bit of it. I have you bookmarked your site to check out the new stuff you post. e cigarette reviews ... 7 Aug 2014, Ashleydanielle
You should try slim 24 pro, it actually works miracles to shed those Extra kilos. slim 24 pro improves the overall metabolic rate of the body thus having a durable effect compared with the other quick fat loss methods.loose 14 kg in 24 days by slim 24 pro ... 6 Aug 2014, Pandit
Hi webmaster, commenters and everybody else !!! The blog was absolutely fantastic! Lots of great information and inspiration, both of which we all need!b Keep ‘em coming… you all do such a great job at such Concepts… can’t tell you how much I, for one appreciate all you do!Spekhargaponsel.com ... 5 Aug 2014, Leo messi
Hello! I’ve been following your blog for a while now and finally got the courage to go ahead and give you a shout out from Kingwood Texas! Just wanted to mention keep up the good work! koekjes ... 3 Aug 2014, Ashleydanielle
Great blog and I love what you have to say coco palms | Rivertrees | the rise @ oxley | Pollen & Bleu | and I think I will tweet this out to my friends so they can check it out as well. ... 17 Jul 2014, Wendylowhy
It was wondering if I could use this write-up on my other website, I will link it back to your website though.Great Thanks. https://www.rebelmouse.com/venusfactorsystemreview/ ... 16 Jul 2014, Ashleydanielle
Die 9. Zone ist die Sabotagezone. Angeschlossen werden können ausschließlich NC-Melder. Die Art der Verdrahtung bleibt Ihnen überlassen. Abus Secvest 868 ... 15 Jul 2014, Alliya
if you feel sick or less on all sorts of health. beauty or you can visit the following web: | Read more | Revews Health | All Health | And also one of my articles are very interesting to read this in it: treating the flu ... 14 Jul 2014, Ridhoboyz
Hey there superb blog! Does running a blog like this require a massive ampunt work? I have virtually no knowledge of programmiing buut I was hoping to start myy own blog soon. cara daftar bisnis libertagia Panduan Lengkap Bisnis Libertagia cara baru daftar bisnis Libertagia bisnis gratis libertagia panduan lengkap ... 4 Jul 2014, Candrax
numm episode no 04 in high quality by glamurtv
numm episode no 05 in high quality by glamurtv
numm episode no 06 in high quality by glamurtv
numm episode no 07 in high quality by glamurtv
numm episode no 08 in high quality by glamurtv
numm episode no 09 in high quality by glamurtv
numm episode no 10 in high quality by glamurtv
numm episode no 11 in high quality by glamurtv
numm episode no 12 in high quality by glamurtv
choti choti khushyan episode no 01 in high quality by glamurtv
choti choti khushyan episode no 02 in high quality by glamurtv
choti choti khushyan episode no 03 in high quality by glamurtv
choti choti khushyan episode no 04 in high quality by glamurtv
choti choti khushyan episode no 05 in high quality by glamurtv
choti choti khushyan episode no 06 in high quality by glamurtv
choti choti khushyan episode no 07 in high quality by glamurtv
choti choti khushyan episode no 08 in high quality by glamurtv
choti choti khushyan episode no 09 in high quality by glamurtv
choti choti khushyan episode no 10 in high quality by glamurtv
choti choti khushyan episode no 11 in high quality by glamurtv
choti choti khushyan episode no 12 in high quality by glamurtv
miss fire episode no 02 in high quality by glamurtv
meri zindagi hai tu episode no 01 in high quality by glamurtv
meri zindagi hai tu episode no 02 in high quality by glamurtv
meri zindagi hai tu episode no 03 in high quality by glamurtv
meri zindagi hai tu episode no 04 in high quality by glamurtv
meri zindagi hai tu episode no 05 in high quality by glamurtv
meri zindagi hai tu episode no 06 in high quality by glamurtv
meri zindagi hai tu episode no 07 in high quality by glamurtv
meri zindagi hai tu episode no 08 in high quality by glamurtv
meri maa episode no 51 in high quality by glamurtv
choti choti khushyan episode no 13 in high quality by glamurtv
choti choti khushyan episode no 14 in high quality by glamurtv
namak parey episode 01 in high quality by glamurtv
namak parey episode 02 in high quality by glamurtv
namak parey episode 03 in high quality by glamurtv
namak parey episode 04 in high quality by glamurtv
namak parey episode 06 in high quality by glamurtv
namak parey episode 05 in high quality by glamurtv
namak parey episode 07 in high quality by glamurtv
namak parey episode 08 in high quality by glamurtv
namak parey episode 09 in high quality by glamurtv
namak parey episode 10 in high quality by glamurtv
namak parey episode 11 in high quality by glamurtv
namak parey episode 12 in high quality by glamurtv
namak parey episode 13 in high quality by glamurtv
namak parey episode 14 in high quality by glamurtv
namak parey episode 15 in high quality by glamurtv
rishtay kuch adhoray se episode no 01 in high quality by glamurtv
namak parey episode 16 in high quality by glamurtv
namak parey episode 17 in high quality by glamurtv
... 1 Jul 2014, Premiersh
pakistan idol hyderabad auditions 13 october 2013 pakistani kumar sanu in pakistan idol by glamurtv
dil tu hi bataa krrish 3 video song in high quality by glamurtv
pakistan idol special children audition 04 october 2013 on geonews by glamurtv
pakistan idol karachi audition 22 oct 2013 by glamurtv
pakistan idol in lahore 28 sep 2013 pakistan idol auditions in lahore lahore participants by glamurtv
extremely funny shaikh rasheed cracking up tv anchor glamurtv
pakistan idol participants 22 sept 2013 pakistan idol audition 22 sept 2013 by glamurtv
live channels
meri maa episode no 39 in high quality by glamurtv
record arynews 4th february 2014 full show high quality video glamurtv
ikhtilaf shaikh rasheed ahmad exclusive 7th june 2013 by glamurtv com
miss fire episode no 01 in high quality by glamurtv
shaikh rasheed best speach must watch by glamurtv
zia ge k saath shaikh rasheed ahmad by glamurtv
2013 pakistan idol karachi auditions 21 oct by glamurtv
pakistan idol 20 sep 2013 pakistan idol audition pakistan singers are joining pakistan idol 2013 by glamurtv
pakistan idol team geo 16 oct 2013 by glamurtv
pakistan idol swat auditions 2 oct 2013 on geo news pakistan idol in swat swat participants glamurtv
pakistan idol sukkur auditions 8 october 2013 on geo news pakistan idol in sukkur participants by glamurtv
pakistan idol silakot audition 17 october 2013 by glamurtv
pakistan idol sialkot auditions 5 october 2013 on geo news pakistan idol in sialkot participants by glamurtv
pakistan idol multan auditions 3 october 2013 on geo news pakistan idol in multan participants by glamurtv
pakistan idol multan audition 4 oct 2013 by glamurtv
8pm with fareeha exclusive interview with sheikh rasheed 29th october 2013 full show by glamurtv
pakistan idol jhang auditions 12 october 2013 today pakistan idol auditions12 october 2013 glamurtv
pakistan idol in sukkhur 10 oct 2013 pakistan idol sukkhur auditions 10 11 2013 on geo news by glamurtv
pakistan idol in noshero 20 oct 2013 pakistan idol noshero auditions 20 10 2013 on geo news glamurtv
pakistan idol blind boy of sheikhupura is the best singer 14 october 2013 on geo news glamurtv
pakistan idol auditions 15 sep 2013 geo news pakistan idol funny audition glamurtv
pakistan idol auditions concludes 24 oct 2013 by glamurtv
pakistan idol auditions 29 oct 2013 by glamurtv
pakistan idol 1st auditions lahore 1 oct 2013 pakistani idol by glamurtv
pakistan idol lahore auditions 25th sept 2013 by glamutv
tu samne jo aaye video song
meri maa episode no 40 in high quality by glamurtv
meri maa episode no 41 in high quality by glamurtv
meri maa episode no 42 in high quality by glamurtv
meri maa episode no 43 in high quality by glamurtv
meri maa episode no 44 in high quality by glamurtv
meri maa episode no 45 in high quality by glamurtv
meri maa episode no 46 in high quality by glamurtv
meri maa episode no 47 in high quality by glamurtv
meri maa episode no 48 in high quality by glamurtv
meri maa episode no 49 in high quality by glamurtv
imran khan in national assembly 11th november 2013 on drones and enemies of pakistan by glamurtv
meri maa episode no 50 in high quality by glamurtv
numm episode no 01 in high quality by glamurtv
numm episode no 02 in high quality by glamurtv
numm episode no 03 in high quality by glamurtv
... 1 Jul 2014, Premiersh
I think you did an awesome job explaining it. Sure beats having to research it on my own. Thanks
grondwerken
... 30 Jun 2014, Ashleydanielle
I have read your article, it is very informative and helpful for me.I admire the valuable information you offer in your articles. Thanks for posting it..
online dating for married people
... 28 Jun 2014, Ashleydanielle
Few days before I brought step up body a but after using this product, and after using this I really gain 3 inches plus it provide energy to fulfill my dream. ... 18 Jun 2014, Alliya
Excellent .. Amazing .. I’ll bookmark your blog and take the feeds also…I’m happy to find so many useful info here in the post, we need work out more techniques in this regard, thanks for sharing.
Baumfällung
... 17 Jun 2014, Ashleydanielle
Just connect to your internet and you can watch the TV shows at your own convenient time.col3 ... 14 Jun 2014, Alliya
Easily, the article is actually the best topic on this registry related issue. I fit in with your conclusions and will eagerly look forward to your next updates. Just saying thanks will not just be sufficient, for the fantasti c lucidity in your writing. I will instantly grab your rss feed to stay informed of any updates. live geo news ... 11 May 2014, Premiersh
I really like your style of blogging. I added it to my favorites blog website list and will probably be checking back soon. glamur ... 29 Apr 2014, Premiersh
Slim Pro I got a complete makeover with this fantastic product. Slim Pro has got great benefits for your body. Go for it if your want to have the best for you.Feel Great With Protein! - Slim Pro ... 14 Apr 2014, Alliya
Jika saat ini anda mempunyai rencana untuk melakukan perjalanan wisata, maka anda bisa mendapatkan layanan paket wisata terbaik di sini dengan harga termurah. Aneka Pilihan Wisata Murah di gunung bromo. Kalau anda sudah punya rencana silahkan hubungi kami dan baca Info lengkapnya
Bagi anda yang membutuhkan pashmina cantik untuk aktifitas sehari-hari anda, kami menyediakan berbagai motif pashmina yang sangat indah. Silahkan hubungi kami daftar penjual pashmina online. Mau melihat koleksi pashmina kami? Silahkan baca berita terbarunya
Adapun koleksi batik pekalongan semakin diminati saat ini, berbagai motif dan model menjadi incaran di pasaran saat ini pusat grosir batik pekalongan. Tertarik untuk melihat aneka ragam pilihan batik pekalongan?klik di sini
Kata-kata cinta romantis begitu indah akan mempesona hati dari kekasih anda. Jika anda ingin mendapatkan koleksi kata mutiara yang paling ampuh, silahkan baca di daftar kumpulan kata-kata cinta. Mau melihat kumpulan kata mutiara yang terbaik untuk pasangan kekasih yang romantis? junjungi halaman berikut
saat ini kehidupan pernikahan suami isteri kerap dihadapkan pada permasalah di mana mereka menemui kebosanan dan membutuhkan variasi. Dr.Boyke menyarankan agar pasangan menggunakan obat atau alat bantu untuk membantu variasi kehidupan seksual mereka….Alat bantu seksual untuk pria idaman istri. Dapatkan produk berkualitas untuk obat kuat pria dan perangsang wanita, lihat koleksi kami
Bagi teman-teman wanita yang membutuhkan banyak tips seputar kehidupan wanita bisa mendapatkannya di sini. Kami mempunyai banyak tips kecantikan dan kesehatan wanita di cantik tanpa kosmetik. Ingin info lengkap dan terbaik? Dapatkan info selengkapnya
Untuk membantu banyak orang dalam mempelajari dunia web, maka kami mencoba untuk memberikan beberapa panduan blogging yang sangat sesuai bagi para pemula. Temukan tips dan tutorial selengkapnya di sini….cara membuat blog sendiri. Pelajari cara membuat blog yang bersaing di SERP, kunjungi website
Outbound training adalah pelatihan yang ditujukan untuk membentuk kerjasama antar individu di dalam sebuah tim. Saat ini tempat pelatihan outbound yang paling terkenal adalah di bogor. Dapatkan info info training outbound di puncak bogor. Mau tahu program pelatihan outbound yang terbaru? Lihat info terbaru dari kami
Kami adalah jasa travel dan rental mobil yang sudah sangat berpengalaman di kota padang. Jika anda membutuhkan paket perjalanan wisata di wilayah sumatera barat, segera hubungi kami pelangi holidays. rental mobil xenia di kota padang. Butuh travel wisata berpengalaman di padang? Silahkan di baca
Beragam model jaket korea saat ini semakin diminati. Jika anda membutuhkan berbagai koleksi dengan tampilan yang menarik dan harga terjangkau dengan bahan fleece berkualitas jaket couple korea yang keren. Dapatkan info lengkap tentang produk jaket korea yang terbaik dan lihat info lengkapnya
Apakah anda membutuhkan pengobatan tradisional untuk penyakit sesak nafas atau yang biasa disebut sebagai asma? Jika ya maka kami memyediakan pengobatan yang alami tips mengatasi asma secara alami. Apakah anda ingin mencoba produk herbal untuk asma anda?pilih produk yang anda inginkan
Sprei untuk kenyamanan tidur anda sangatlah penting. Jangan memili sprei atau bed cover sembarangan karena bisa jadi anda merasa rugi membelinya. Seringkali sprei berkualitas justru diperoleh dari industri rumahan. sprei dan sarung bantal dijual online. Lihat koleksi sprei dan bed cover kamiclick here
pacar kuku adalah koleksi yang bisa membantu penampilan anda untuk terlihat lebih cantik tapi siap dibersihkan kapan saja saat anda ingin sholat. Ini sangat praktis bagi anda kaum muslimah yang dinamis. butuh rani kone henna?. Lihat koleksi pacar kuku dan kutek kami. read more
... 13 Apr 2014, Wiwik
I check out this strategy, for sure many will use it! ... 2 Apr 2014, Iomyhall
I know what you mean about this kind of attacks, I am quite impressed! ... 31 Mar 2014, Janicetre
Sometimes it is not so easy to do it, but at least we have the duty to try ... 26 Mar 2014, Joanedoned