6 chapter 6: the internet 1 intrusion attempts an intrusion is any access to data or programs by...

47
6 Chapter 6: The Internet 1 Intrusion Attempts An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons Looking for open ports is one of the most common ways of gaining unauthorized access to a network-based computer A port probe (or port scan) uses automated software to locate computers that have open ports and are vulnerable to unauthorized access

Upload: esther-davidson

Post on 21-Jan-2016

215 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

6

Chapter 6: The Internet 1

Intrusion Attempts An intrusion is any access to data or programs by hackers,

criminals, or other unauthorized persons

Looking for open ports is one of the most common ways of gaining unauthorized access to a network-based computer

A port probe (or port scan) uses automated software to locate computers that have open ports and are vulnerable to unauthorized access

Page 2: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

6

Chapter 6: The Internet 2

Securing Ports One of the easiest steps to

enhance your computer’s security is to turn it off when you aren’t using it

A firewall is software or hardware designed to filter out suspicious packets attempting to enter or leave a computer

Page 3: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

6

Chapter 6: The Internet 3

Virtual Private Networks It is possible to secure remote connections by setting up

virtual private network (VPN) access to a remote access server in the corporate office

Access to a VPN is usually by invitation only. Employees who need to access a VPN are given the necessary instructions, addresses, and passwords to make connections

Page 4: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

How will you utilize the internet in your IT professional career?

Page 5: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

What is the Web?

• an Internet service that offers a vast collection of documents, graphics, digitized video clips, and sound files that can be accessed by following links

Page 6: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

What does VPN stand for?

• Virtual Private Network

Page 7: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

What does ISP stand for?

• Internet Service Provider

Page 8: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

The Web & Email

Page 9: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 9

Web Basics The Web is a collection of document, image, video, and

sound files A Web site contains a collection of related information

Page 10: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

Internet & The Web

• Internet: a vast network designed to transfer data from one computer to another

• The Web: a collection of document, image, video, and sound files

Page 11: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 11

Web Basics A Web server accepts requests from browsers

A Web page is the product or output of one or more Web-based files displayed in a format similar to a page in a book

A Web browser is client software that displays Web page elements and handles links between pages

Every Web page has a unique address called a URL

Page 12: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 12

HTML Set of specifications for creating documents that a browser

can display as a Web page

Page 13: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

• HTML: Stands for Hyper Text Markup Language. Predominant markup language for web pages.

• XHTML: Stands for Extensible Hyper Text Markup Language. Family of XML markup languages that mirror or extend versions of widely used HTML.

• DHTML: Stands for Dynamic Hyper Text Markup Language. Collection of technologies used together to create interactive and animated web sites.

http://www.w3schools.com/

Page 14: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

http://www.w3schools.com/

Page 15: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

HTTP

• Stands for Hypertext Transfer Protocol– networking protocol for distributed, collaborative,

hypermedia information systems– it is the foundation of data communication for the

World Wide Web

Page 16: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 16

Web Browsers Help you access Web pages

Upgrade to new browser versions as they become available

Popular browsers:– Internet Explorer– Mozilla Firefox– Apple Safari– Netscape Navigator– Opera

Page 17: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

Do you have a favorite browser?

Page 18: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 18

Web Browsers Helper applications extend browser’s ability to work with file

formats– A plug-in is a type of helper application (ex. QuickTime,

Flash)– A player is any helper

application or plug-in that helps a browser display a particular file format

Page 19: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 19

Cookies Small chunk of data generated by a Web server and stored

in a text file on computer’s hard disk– can be used for authentication, storing site preferences, shopping

cart contents, etc.

Your computer does not have to accept cookies

Page 20: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 20

Web Page Authoring Online Web authoring tools

Web authoring software– Adobe Dreamweaver– Microsoft Expression

Web

Text editor

Page 21: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 21

HTML Scripts HTML scripts can perform complicated tasks and respond to

user actions– HTML forms– Server-side script– Client-side script– Java applet– ActiveX control

Page 22: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 22

Search Engine Basics A Web search engine is a program designed to help people

locate information on the Web by formulating simple keyword queries

Page 23: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 23

Search Engine Basics A Web crawler is a computer program that is automated to methodically

visit Web sites

A search engine indexer is software that pulls keywords from a Web page and stores them in a database

A search engine’s query processor looks for your search terms in search engine’s indexed database and returns a list of relevant Web sites

Link popularity is measured by quantity and quality of links from one Web page to others

A meta keyword is entered into a header section of a Web page when it is created and is supposed to describe the page contents

Page 24: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 24

Citing Web-Based Source Material

To copy a passage of textfrom a Web page, highlightthe text, click the Editmenu, then select Copy.Next, switch to your owndocument and use thePaste option.

Page 25: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7 Citing Web-Based Source Material

Chapter 7: The Web and E-mail 25

Page 26: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

For APA formatting I recommend using Purdue Owl to help with citing sources

http://owl.english.purdue.edu/owl/resource/560/01/

Page 27: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 27

E-commerce Basics Business transactions conducted

electronically over a computer network– B2C (business-to-consumer)– C2C (consumer-to-consumer)– B2B (business-to-business)– B2G (business-to-government)

Page 28: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 28

E-commerce Basics Enhances traditional business models

Styles of online advertisements– Banner ad– Hover ad– Pop-up ad

• Click-through rate

Ad-blocking software prevents ads from appearing on screens

Page 29: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 29

Online Shopping

In a typical shoppingsession, you connect toan online storefront anduse navigation controlsto browse through themerchant’s catalog. Asyou browse, you candrop items into yourelectronic shopping cart.At the checkout counter,you enter the informationnecessary to pay for theitems you selected.

Page 30: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 30

Online Auctions An online auction is the

electronic equivalent to good old-fashioned yard sales, rummage sales, and auctions

You can expect to bid on new, used, closeout, overstock, or refurbished items at an online auction

Computer software takes the place of an auctioneer

Page 31: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 31

Online Payment The most popular ways to make online payments include

submitting your credit card number directly to a merchant and using a third-party payment service such as PayPal

Online shoppers are justifiably worried that personal information and credit card numbers supplied in the course of an e-commerce transaction might be hijacked and used inappropriately

Page 32: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 32

Online Payment A secure connection encrypts the data transmitted between

your computer and a Web site• SSL (Secure Sockets Layer)• TLS (Transport Layer Security)• S-HTTP (secure HTTP)

Page 33: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 33

Online Payment Person-to-person payments

are an alternative to credit cards– The payment service is

the only entity that sees your credit card number

An electronic wallet is software that stores billing and shipping information

Page 34: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

Social Networking & Professional Networking

• Social Networks– Facebook– MySpace– Twitter

• Professional Networks– LinkedIn

Page 36: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 36

E-Mail Overview Any person with an e-mail account can send and receive e-

mail messages

Page 37: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 37

E-Mail Overview Basic e-mail activities

– Writing– Reading– Replying to– Forwarding

Page 38: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 38

E-Mail Overview E-mail attachments are files that travel with an e-mail

message

Page 39: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 39

Page 40: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 40

Netiquette Internet etiquette

– Meaningful subject– Use uppercase and lowercase letters– Check spelling– Be careful what you send– Be polite– Be cautious with sarcasm and humor

Page 41: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 41

Netiquette– Use smileys and text messaging shorthand

cautiously

– Use the Bcc function for group mailings

– Don’t send replies to all recipients

– Don’t send huge attachments

– Explain attachments

– Stay alert for viruses

– Notify recipients of viruses

Page 42: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 42

E-mail Technology E-mail systems carry and manipulate e-mail messages

Three types of e-mail systems widely used today:– POP (Post Office Protocol)– IMAP (Internet Message Access Protocol)– Web-based e-mail

Page 43: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 43

E-mail Technology Web-based e-mail accounts allow you to use a browser to

access your e-mail messages

Page 44: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 44

Spam Spam is unwanted electronic junk mail about medical

products, low-cost loans, and fake software upgrades that arrives in your online mailbox

A spam filter is a type of utility software that captures unsolicited e-mail messages before they reach your inbox

Page 45: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 45

Phishing Phishing is an e-mail based scam designed to persuade you

to reveal confidential information, such as your bank account number or Social Security number

If you don’t want to become a phishing victim, be suspicious of e-mail messages that supposedly come from banks, ISPs, online payment services, operating system publishers, and online merchants

Page 46: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7 Fake Sites A fake Web site looks

legitimate, but has been created by a third party to be a very clever replica of a legitimate Web site

Pharming is an exploit that redirects users to fake sites by poisoning a domain name server with a false IP address

Chapter 7: The Web and E-mail 46

Page 47: 6 Chapter 6: The Internet 1 Intrusion Attempts  An intrusion is any access to data or programs by hackers, criminals, or other unauthorized persons

7

Chapter 7: The Web and E-mail 47