Posts

Showing posts with the label professional certification courses

Understanding the organization and its context

Image
Required activity The organization determines external and internal issues relevant to its purpose and affecting its ability to realize the intended outcome(s) of the knowledge  security management system (ISMS) . Explanation As an integral function of the ISMS, the organization continually analyses itself and therefore the world surrounding it. This analysis cares with external and internal issues that in how affect information security and the way information security are often managed, which are relevant to the organization’s objectives. Analysis of those issues has three purposes: — Understanding the context so as to make a decision the scope of the ISMS; — Analyzing the context so as to work out risks and opportunities; — Ensuring that the ISMS is tailored to changing external and internal issues. External issues are those outside of the organization’s control. this is often mentioned because the organization’s environment. Analyzing this environment can incl...

Everything You Need To Know About Sniffing – Part 2

Image
In this Sniffing article you will learn about Protocols vulnerable, Hardware Protocol Analyzers, Wiretapping and its methods, Types of Wiretapping and Lawful Interception Protocols vulnerable to Sniffing. Vulnerable to sniffing The following protocols are vulnerable to sniffing. The most reason for vulnerable to Sniffing these protocols is to accumulate passwords: Telnet   and   Rlogin Telnet may be a protocol used for communicating with a remote host (via port no. 23) on a network by using a instruction terminal. Rlogin enables an attacker to log into a network machine remotely via TCP connection. The protocols fail to supply encryption; therefore the data traversing between the clients connected through any of those protocols is in plain text and vulnerable to Sniffing, Attackers can sniff keystrokes including usernames and passwords. HTTP Due to  vulnerabilities  within the default version of HTTP, websites implementing HTTP transfer user data a...