Ozg Systems, Inc.

06/03/2023

! 🟣🔵🟢

05/11/2022

20/04/2022

What is an Attack Vector?

In the context of information security, an attack vector is a specific path, method, or scenario that can be exploited by attackers to break into an IT system, thus compromising its security. The term was derived from the corresponding notion of 'vector' in biology.

Hackers would use a number of vectors to launch their attacks on your IT systems so that they can take advantage of weaknesses of any given IT system. You are very much familiar with so many of attack vectors, e.g., malwares, viruses, malicious email attachments, malicious weblinks, pop-up windows, instant messages, social engineering, unpatched vulnerabilities, etc.

👉 Types of Attack Vectors

Most attack vectors can be classified in 2-categories:

1. PASSIVE ATTACK VECTORS

Passive attack vectors are used by attackers when they use them to 'monitor' your systems for finding open-ports, or other vulnerabilities, to collect more information about you or your systems. These are a little difficult to detect, because these do NOT usually involve any alteration to your data or system resources. They don't cause damage to your company's data or systems, as attackers intend to steal or breach the confidentiality of your data.

Passive attack vectors include passive reconnaissance, which sees the attacker monitor your company's systems for vulnerabilities WITHOUT interacting with them, through tools like session capture, and active reconnaissance, where the attacker uses methods like port-scans to engage with target systems.

2. ACTIVE ATTACK Vectors

These attack vectors are used by attackers with a clear intention of disrupting or damaging to your company's systems, or to affect the regular operations of these systems. These vectors may be in operation if your systems are forced to shut-down maliciously. Using these attack vectors, they are launching full-fledged ATTACKS exploiting the vulnerabilities found on your IT system(s), e.g., DoS/DDoS attacks, using your users' weak passwords, or malwares or phishing methods, MiTM attacks, email spoofing, etc.

A common example of an active attack is a masquerade attack, in which an intruder pretends to be a trusted user and steals login credentials to gain access privileges to your system resources. Active attack methods are often used by cyber criminals to gain the information they need to launch a wider cyberattack against your organization.

Ransomware attacks also fall in this category, as they are intended to elicit money from your company or organisation.

👉 Methodology of Attack Vectors

In most cases, the general methodology of exploiting attack vectors is the same:

1. Hackers identify a target system that they wish to pe*****te or exploit.

2. Hackers use data collection and observation tools such as sniffing, emails, malware or social engineering to obtain more information about the target.

3. Hackers use this information to identify the 'best' attack vector, then they create tools to exploit it.

4. Hackers break the security system using the tools they've created, then install malicious software applications.

5. Hackers begin to monitor the network, stealing your personal and financial data or infecting your computers and other endpoint devices with malware bots, etc.
____
👉 WHAT IS THE DIFFERENCE BETWEEN ATTACK VECTOR AND ATTACK SURFACE?

They are not same.

An attack vector differs from an attack surface, as the vector is the means by which an intruder gains access and the attack surface is what is being attacked.

The Attack Surface is the total number of attack-vectors an attacker can use to launch an attack against your organisation to extract data or exploit in any other possible ways. All your devices and people are part of your organization’s attack surface because their vulnerabilities, such as weak passwords or unpatched software, can also be exploited by attackers.

In short, attack surface is the 'entire external-facing area' of your organization that is vulnerable to hacking and other cyberattacks.
___
👉 MONITORING ATTACK VECTORS IS CRUCIAL

Attack vectors are linked to security vulnerabilities in your network, so you can use an attack surface monitoring solution. If you do that, you should be able to locate attack vectors throughout your threat landscape.

You should forever monitor your IT systems for attack vectors using up-to-date IOCs databases. For that you need to subscribe to advanced THREAT INTELLIGENCE channels, such as CrowdStrike, etc, so that you have consistent access to the latest information on known threats and attack vectors.

One often overlooked attack vector are your third and fourth-party vendors and service providers. It doesn't matter how sophisticated your internal network security and information security are, if vendors have access to sensitive data they are as much a risk to your organization.

This is why it is important to measure and mitigate third-party risk and fourth-party risk. This means it should be part of your information security policy and information risk management program.

Overall, you need to implement right POLICIES and PROCEDURES to secure potential attack vectors against exploitation by hackers.
___
👉 Why is it important to think in terms of threat vectors?

Therefore, it is highly imperative for you to change the way you approach Information Security. You are advised to learn how to focus on specific threat vectors.

Here is an example..

Healthcare industry, is one of the most vulnerable industries with a lucrative payoff and a large set of threat vectors.

These threat vectors include legacy and medical devices with patch vulnerabilities, an increased reliance on internet-of-things (IoT) devices, business associates with flimsy security and access to protected health information (PHI), and overworked employees reached through social engineering.

11/08/2021

Become an

Specialist

05/11/2020

Ozg Technology Partners -

3CX Phone System, , Aastra Phones, , AudioCodes, Axis, Allo, , ClearOne, , , Dinstar, , Digium, Elastix, Fanvil, FreeMate, Freetalk Wireless Headsets, Grandstream, , GoIP, , , , , , Moxa, Mediatrix, Mobotix, Multi-Tech, Matrix, , OpenVox, OBihai, , Patton, Plantronics, Polycom, QNAP, Quintum, RedFone Communications, Rhino Equipment, RockBochs, Ruckus Wireless, SpectraLink, Sangoma, Sangoma Session Border Controllers, , , Snom, , Ubiquiti, Vonia Headset, Yealink, Zyxel.

Products for BPO / Call Center / Wfh / Intra-Co. Setup ~

VoIP Phone, VoIP Gateway, VoIP Headset and Dial Pad, VoIP PBX, VoIP Camera, VoIP Solutios, VoIP FXS Gateways, VoIP FXO gateways, VoIP GSM Gateway, VoIP Asterisk Cards,VoIP Digital gateways,VoIP Hadware, VoIP Equipments, 3CX Phone System, Aastra Phones, ACTi Dome IP Cameras, ACTi Indoor IP Cameras, ACTi NVR, ACTi Outdoor IP Cameras, ACTi PTZ IP Cameras, ACTi Video Servers, Adtran Routers, Advanced Network Devices, Digital Message Boards, Audiocodes E-SBC, AudioCodes Gateways, AudioCodes Mediant 1000, AudioCodes Mediant 2000, AudioCodes Mediant 600, AudioCodes MediaPack, Audiocodes MSBG Gateways, AudioCodes Phones, Axis Accessories, Axis Camera Housing, Axis Camera Mounts, Axis Lenses, Axis Peripherals, Axis Power, Axis Software, Axis Dome IP Cameras, Axis Indoor IP Cameras, Axis IP Cameras, Axis Outdoor IP Cameras, Axis PTZ IP Cameras, Axis Thermal IP Cameras, Axis Video Servers, 1-Port Video Servers, 6-Port Video Servers, Rack Solutions, Axis Wireless IP Cameras, Cisco Adapters, Cisco Conference Phones, Cisco Phones, Cisco Phone Accessories, Cisco Phone Headsets, Cisco Wireless Phones, Cisco Routers, Cisco Security, Cisco Switches, Cisco 100 Series Unmanaged Switches, Cisco 200 Series Smart Switches, Cisco 300 Series Managed Switches, Cisco 500 Series Stackable Switches, Cisco Catalyst 2960-S and 2960 Series Switches, Cisco Telepresence, Cisco Unified Communication, Cisco WebEx Telepresence, Cisco Wireless Access Points, ClearOne CHAT, ClearOne CHAT USB Headsets, ClearOne Conference Phone, ClearOne MAX, ClearOne Speakerphone, CounterPath, CounterPath Bria Software as a Service (SaaS), Smartphone, Tablet, Cudatel, CyberData IP Amplifiers, CyberData IP Clocks, CyberData IP Intercoms, CyberData IP Speakers, D-Link, Digium, Asterisk Support, Digium A4 Series, Digium A8 Series, Digium AEX2400 Series, Digium AEX400 Series, Digium AEX800 Series, Digium Analog Cards, Digium Digital Cards, Digium Gateways, Digium Phones, Digium TDM2400 Series, Digium TDM410 Series, Digium TDM800 Series, Digium TE133 and TE134, Switchvox, Edgewater Networks, EdgeMarc ESBC, Edgewater Upgrade, Elastix, Elastix Appliances, Elastix Support, FREETALK Headsets, FREETALK Web Cameras, FREETALK Wireless Headsets, Grandstream, Grandstream Gateways, Grandstream IP Surveillance, Grandstream Phones, Grandstream UCM6100, Grandstream Video Phones, Grandstream VoIP Adapters, Huawei Switches, Huawei S1700 Switches, Huawei S2700 Switches, Huawei S5700 Switches, Huawei Video Conferencing, Jabra Binaural Headsets, Jabra Corded Headsets, Jabra BIZ 2300, Jabra BIZ 2400 Series, Jabra GN1900 Series, Jabra GN2000 Series, Jabra GN2000 USB Series, Jabra GN2100 Series, Jabra GN2400 Series, Jabra UC Voice Series, Jabra Headset Accessories, Jabra Electronic Hook Switch Cables, Jabra QD Cords, Jabra Lync Headsets, Jabra Wired Lync Headsets, Jabra Wireless Lync Headsets, Jabra Monaural Headsets, Jabra Unified Communications Headsets, Jabra Wireless Headsets, Jabra GN9125 Series, Jabra GN9300 Series, Jabra GO Series, Jabra MOTION Series, Jabra PRO 900 Series, Jabra PRO 9400 Series, Konftel, VoIP Maintenance Services, Softphone, Logitech, Mediatrix 3000 Series, Mediatrix 4000 Series, Mediatrix C7 Series, Mediatrix eSBC, Mobotix Accessories, Mobotix IP Cameras, Dome IP Cameras, DualDome, MonoDome, FlexMount, Hemispheric,IP Video Door Station, Mobotix Lens Sensor Modules, Multi-Tech,Netgear,Netgear Green,Storage,Switch Modules, Switches, Managed, Smart Switches, Unmanaged, Wireless Access Points, OBihai, Panasonic Accessories, Panasonic Lenses, Panasonic Mounts, Panasonic Software, Panasonic DECT Phones, Panasonic IP Cameras, Business IP Cameras, i-Pro Cameras, Residential Cameras, Panasonic Network Video Recorders, Panasonic Video Servers, Panasonic VoIP Phones, Patton 4110 Series Gateways, Patton 4300 Series Gateway, Patton 4400 Series Gateways, Patton 4520 Series Gateway, Patton 4900 Series IPChannel Bank, Patton 4940 Series Gateways, Patton 4950 Series Gateways, Patton 4970 Series Gateway, Patton 4980 Series Gateway, Patton Analog Gateways, Patton Digital Gateways, Phoenix Audio, Phoenix Audio Duet, Phoenix Audio Quattro, Phones, Plantronics Accessories, Plantronics Electronic Hook Switch Cables, Plantronics Quick Disconnect Cords, Plantronics Binaural Headsets, Plantronics Lync Headests, Plantronics Wired Lync Headsets, Plantronics Wireless Lync Headsets, Plantronics Monaural Headsets, Plantronics USB Headsets, Plantronics Wired Headsets, Plantronics DuoPro and DuoSet, Plantronics EncorePro Series, Plantronics Mirage and TriStar, SupraPlus Wideband, Plantronics Wireless Headsets, Plantronics CS500 Series, Plantronics CS500 XD Series, Plantronics Savi 400 Series, Plantronics Savi 700 Series, Polycom Conference Phone, Polycom Phones, Polycom Lync Phones, Polycom SoundPoint IP Phones, Polycom SoundStation Phones, Polycom VVX Business Media Phones, Polycom Speakerphone, Polycom Video Conferencing, Polycom RealPresence Accessories, Polycom RealPresence Group Series, Polycom RealPresence Room, SpectraLink, QNAP, Quintum Technologies, Quintum Tenor AF Series, Quintum Tenor AX Series, Quintum Tenor DX Series, RedFone Communications, Rhino Analog Cards, Rhino Channel Banks, Rhino Digital Cards, Rhino PBX Appliance Accessories, Rhino PBX Appliances, RochBochs Accessories, RockBochs PhoneBochs, Rockbochs 3CX Appliances, Ruckus Wireless, Ruckus FlexMaster, Ruckus MediaFlex, Ruckus Support, Ruckus ZoneDirector, Ruckus ZoneFlex, Sangoma A100 Series, Sangoma A200, Sangoma A400, Sangoma Analog Cards, Sangoma B600 Series, Sangoma B601 series, Sangoma Digital Cards, Sangoma Instant Rebates, Sangoma NetBorder Express, Sangoma NetBorder Transcoding Gateway, Sangoma Transcoder Cards, Sangoma W400 GSM Board, Session Border Controllers, Vega SBC Session Upgrades, Vega Gateways, Vega 400, Vega 50, Vega 5000, Sennheiser Corded Headsets, Sennheiser CC Series, Sennheiser SC Series, Sennheiser SH Series, Sennheiser Headset Accessories, Sennheiser Speakerphones, Sennheiser Wireless Headsets,Gigaset Analog Phones,Gigaset Handsets,Gigaset VoIP Phones,snom Accessories,Snom Conference Phone, snom IP-PBX, Snom Phones,snom UC Phones,Sony Accessories,Sony Housings,Sony Mounts,Sony Software,Sony Dome IP Cameras,Sony Indoor IP Cameras,Sony IP Cameras,Sony Network Video Recorders, Sony Outdoor IP Cameras, Sony PTZ IP Cameras, Sony Video Servers, Sony Wireless IP Cameras, Digium Asterisk Card, Sangoma Digtial E1 PRI card, Audiocodes gateway, IP PHone, Yealink SIP phone, Grandstream VoIP Phones, Grandstream VoIP Gateway, Cisco IP Phone, Plantronics Headsets, Vonia Headsets, Freemate Headset, Dasscom USB Headsets, HP Networking Hardware, Grandstream IP Camera, MAtrix VoIP FXS-FXO Gateway, Garandstream ATA, Matrix VoIP ATA, PAtton VoIP Gateway, 3CX VoIP Exchange, Cisco IP pHone headsets, Fanvil IP Phones, Avaya IP Phone, Engenius Wifi solutions, Ubiquti Wifi Solutions, Dinstar GSM gateway, GoIP GSM Gateway, Call Center Dial, Call Center Solutions, Call Center Equipments, Server, IPBAX,VoIP Phone,VoIP FXS-FXO Gateways,VoIP Digital E1 T1 PRI Gateways, E1 T1 Digital PRI Cards, GSM Gateway, Headsets, RJ09 Headset, USB Headset,VoIP Solutions, Networking Hardware & Solutions, Antivirus, Wireless Solutions, IT Infrastructure Solutions, Network Security, Surveillance Solutions, Cloud Computing, Call Center Applications, Dialer, Call Center Set-up Solutions, Software Embedded Customization, Kiosk Solutions, IP Telephony Solutions, Routing &Switching Solutions, Switches, Routers, Firewalls, UTM Boxes, Wireless, Voice Products, Voice Solutions, Video Products, Microsoft visualizations, connectivity solutions.

15/08/2020

What is QinQ?

It's layer 2 encapsulation technology i.e. used to encapsulte the private VLAN tag into public VLAN tag. The packets transmitted along the network carry multiple VLAN tags. Not only one.

QinQ Acts as Layer 2 VPN private tunnel to Pass the Data inside the packet network.

We have 2 VLAN tags which are -

📌 C valn is customer VLAN tag and called inner VLAN tag.

📌 S vlan is supplier VLAN tag and called outer tag.

The benefits from using QinQ are:

1) extend VLAN tags capacity which will be 4094 * 4094.

2) extend the usage of ethernet from LAN to WAN.

10/08/2020

📌 LPT
📌 QinQ
📌 VPN
📌 MPLS_TE

20/05/2020

Follow the new Law i.e.