Internet security - Revision history

DavidB4-bot: /* Politics */Spelling, grammar, and general cleanup, typos fixed: the the → the

2020-04-14T03:44:27Z

Politics: Spelling, grammar, and general cleanup, typos fixed: the the → the

DavidB4: /* Solutions */ improvements

2019-06-17T21:48:39Z

Solutions: improvements

DavidB4: /* Malicious software (Malware) */ ransomware

2019-06-17T21:34:47Z

Malicious software (Malware): ransomware

DavidB4: /* Politics */ encryption back doors

2018-12-29T05:41:13Z

Politics: encryption back doors

DavidB4: /* Password managers */ typos

2018-12-29T05:35:35Z

Password managers: typos

DavidB4: /* Malicious hardware */ internal devices

2018-12-29T05:31:33Z

Malicious hardware: internal devices

DavidB4: /* Malicious software (Malware) */ wikilink

2018-12-29T05:29:59Z

Malicious software (Malware): wikilink

DavidB4: /* Denial-of-service attacks */ wikilinks

2018-12-29T05:29:09Z

Denial-of-service attacks: wikilinks

DavidB4: /* Vulnerabilities/flaws */ typo, flow

2018-12-29T05:27:03Z

Vulnerabilities/flaws: typo, flow

DavidB4: +wikilink

2017-09-08T03:01:13Z

+wikilink

@@ Line 70: / Line 70: @@
 ==Politics==
-Internet security is not free of politics.  Former President [[Obama]] has been able to curry favor with a number of people by speaking repeatedly on cybersecurity.<ref>https://www.whitehouse.gov/issues/foreign-policy/cybersecurity</ref><ref>https://www.whitehouse.gov/issues/foreign-policy/cybersecurity/summit</ref>  However, this political aspect is in no way the greatest issue.  One of the greatest political risks within Internet security is that of freedom being surrendered in the name of security.  Given enough time and a stable economy, commercial enterprises are able to ensure the Internet is a safe place, or at least that people are safe from the Internet while using it.  However, governments have a tendency to take freedom in exchange for offering security; an offering which may or may not be forthcoming.  In the name of security, things like "the great firewall of China" can be created, which censors available content.  This will certainly reduce the security risks from the outside, but the risk of tyrannical dictatorship from inside is too great for this to be allowed by the people.  Likewise, the push for "back-doors" in encryption is supposedly intended to protect individuals from attackers, while allowing governments and other companies to easily decrypt all data at will, for "security" reasons. Not only is this impractical, as "Back doors" always weaken security over-all (and it is only a matter of time before attackers gain access through the the back door as well), but it also gives any number of agencies full access to private information.
+Internet security is not free of politics.  Former President [[Obama]] has been able to curry favor with a number of people by speaking repeatedly on cybersecurity.<ref>https://www.whitehouse.gov/issues/foreign-policy/cybersecurity</ref><ref>https://www.whitehouse.gov/issues/foreign-policy/cybersecurity/summit</ref>  However, this political aspect is in no way the greatest issue.  One of the greatest political risks within Internet security is that of freedom being surrendered in the name of security.  Given enough time and a stable economy, commercial enterprises are able to ensure the Internet is a safe place, or at least that people are safe from the Internet while using it.  However, governments have a tendency to take freedom in exchange for offering security; an offering which may or may not be forthcoming.  In the name of security, things like "the great firewall of China" can be created, which censors available content.  This will certainly reduce the security risks from the outside, but the risk of tyrannical dictatorship from inside is too great for this to be allowed by the people.  Likewise, the push for "back-doors" in encryption is supposedly intended to protect individuals from attackers, while allowing governments and other companies to easily decrypt all data at will, for "security" reasons. Not only is this impractical, as "Back doors" always weaken security over-all (and it is only a matter of time before attackers gain access through the back door as well), but it also gives any number of agencies full access to private information.
 ==References==

@@ Line 28: / Line 28: @@
 ===Network layer security===
-A variety of protocols have been created to secure TCP/IP communication.  These include Secure Sockets Layer (SSL) and the newer Transport Layer Security (TLS) for Wold Wide Web traffic, as well as [[Pretty Good Privacy]] (PGP) for [[email]], as well as IPsec for securing the network layer.
+A variety of protocols have been created to secure TCP/IP communication.  These include Secure Sockets Layer (SSL) and the newer Transport Layer Security (TLS) for Wold Wide Web traffic, as well as [[Pretty Good Privacy]] (PGP) for [[email]], and IPsec for securing the network layer.
 ===Firewalls===
@@ Line 43: / Line 43: @@
 ===Encryption===
-Another method used to protect Internet security is [[encryption]].  Information can be transferred win encrypted form when both parties already know the decrypting algorithm and key.  However, when this is not the case, an ingenious solution was been devised which used both a public and private encryption key.  Using this method, a client's data is encrypted using the public key which a server freely provides.  It is then sent to the host, in its encrypted form.  When the host receives this information, it uses its private key, which only it knows, to decrypt the information.<ref>https://www.comodo.com/resources/small-business/digital-certificates2.php</ref> This method is used in HTTPS (Hyper Text Transfer Protocol Secure) communication, which is implemented by online backing, E-mail and many other websites today. Without a [[quantum computer]], it would take so long to break this communication that by the time it were complete, the information would be useless.  Only if the server's private key has been compromised does this system become practically vulnerable.<br />
+Another method used to protect Internet security is [[encryption]].  Information can be transferred in encrypted form when both parties already know the decryption algorithm and key.  However, when this is not the case, an ingenious solution was been devised which used both a public and private encryption key.  Using this method, a client's data is encrypted using the public key which a server freely provides.  It is then sent to the host, in its encrypted form.  When the host receives this information, it uses its private key, which only it knows, to decrypt the information.<ref>https://www.comodo.com/resources/small-business/digital-certificates2.php</ref> This method is used in HTTPS (Hyper Text Transfer Protocol Secure) communication, which is implemented by online backing, E-mail and many other websites today. Without a [[quantum computer]], it would take so long to break this communication that by the time it were complete, the information would be useless.  Only if the server's private key has been compromised does this system become practically vulnerable.<br />
 This helps prevent any harm from communication interception, since the data in transit is useless without the private key.  It does not solve the problem of interception, and date could still be destroyed, but it uses the concept, "you can get it, but you can't use it."
@@ Line 50: / Line 50: @@
 ===Software diversity===
-If everyone uses the same software, everyone shares the same vulnerabilities.  However, when people use a variety of software, they reduce the risk of being successfully attacked.  For example, [[Windows XP]] users were put at risk by [[Conficker]], but Mac OS users were safe, since they did not have the same vulnerability in port 445 as Windows XP.  This is also true for [[web browser]]s.  For example, a malicious banner advertizement may exploit a vulnerability in Internet Explorer, but people using [[Mozilla Firefox]] are probably safe, because the gecko engine does not have the same flaw.
+If everyone uses the same software, everyone shares the same vulnerabilities.  However, when people use a variety of software, they reduce the risk of being successfully attacked.  For example, [[Windows XP]] users were put at risk by [[Conficker]], but Mac OS users were safe, since they did not have the same vulnerability in port 445 as Windows XP.  This is also true for [[web browser]]s.  For example, a malicious banner advertisement may exploit a vulnerability in Internet Explorer, but people using [[Mozilla Firefox]] are probably safe, because the gecko engine would not have the same flaw.
 ===Anti-malware software===
@@ Line 61: / Line 61: @@
 Although Denial of Service attacks are harder to combat, significant progress has been made in this area.  In general, a powerful, stable proxy is linked to a domain name, so that when a website is requested, the proxy is contacted.  The proxy will then try to determine if the connection hostile or not, then act accordingly.  A leading company in this area is CloudFlare, which has patented a determination method which requires each client's computer to solve a computational problem using JavaScript before it can access the site.<ref>http://www.google.co.uk/patents/US8613089</ref>
-===Proxies===
+===VPNs===
-Another security method sometimes used is routing all communication through a proxy or VPN.  This connection is usually encrypted, so even unsecured communication is protected until it reaches the proxy server.  The proxy will then redirect each packet to the host, and redirect the host's responses through a secure "tunnel" back to the client.  Although the connection is unsecured for part of its journey, it becomes anonymous, so any personal information cannot be traced back to the specific user very easily.<br />
+Another security method sometimes used is routing all communication through a VPN tunnel.  This connection is encrypted, so even unsecured communication is protected until it reaches the VPN concentrator at the destination.  At this point, the user can securely access the remote network. The remote network will also typically redirect traffic destined for the internet onward to its destination. It will operate as a go-between, redirecting the internet host's responses through the secure "tunnel" back to the client.  Although this kind of internet connection is unsecured for part of its journey, it protects the data from local threats (such as a compromised or spoofed wireless access point).
-However, proxies include their own set of problems.  The least of which is reduced communication speed.  Greater concerns include the security of the proxy itself.  Such a server could be compromised, meaning that all communication form hundreds of users is not being skimmed by a malicious party.  Some are also concerned about the privacy of proxies which have not been compromised.  In some cases, not privacy policy is provided, and even if one is, such servers are sometimes not very well regulated.  For these reasons, some question whether this option provides or surrenders safety.  However, if trusted proxies are available, this can help protect from data interception.
+However, proxies include their own set of problems.  The least of which is reduced communication speed.  Greater concerns include the security of the proxy itself.  If clients are not using a remote server which they implicitly trust, that server could be compromised, meaning that all communication from hundreds of users is now being skimmed by a malicious party.  Some are also concerned about the privacy of proxies which have not been compromised.  In some cases, no privacy policy is provided, and even if one is, such servers are sometimes not very well regulated.  For these reasons, there is some question whether this option provides or surrenders safety.  However, if trusted proxies are available, this can help protect from data interception.
 ===Password managers===
-Almost everyone has seen warnings when they created online accounts to never use the same password as they have on any other website.  They put that message there for a reason.  One could either say it is there because they want to keep the user safe, or that it is in place so they do not get sued when people do just this, and have someone break into their account later.  Either way, the fact remains that using the same password over and over puts people very much at risk.  If any one of those websites is compromised, every other account such people hold can also be taken over.  It is often for this reason that a few people occasionally lose their entire digital lives.<br />
+Almost everyone has seen warnings when they created online accounts to never use the same password as they have on any other website.  These messages are in place for a reason.  One could either say it is there because they want to keep the user safe, or that it is in place so they do not get sued when people do just this, and have someone break into their account later.  Either way, the fact remains that using the same password over and over puts people very much at risk.  If any one of those websites is compromised, every other account such people hold can also be taken over.  It is often for this reason that a few people occasionally lose their entire digital lives.<br />
-Although a password manager is a convenience item, it can be a very important one.  Most people cannot remember more than five passwords, so they simply reuse the one or ones over and over.  A password manager is an easy way for people to make unique passwords for each website, and still only need to remember one—the master password for the password manager.<ref>http://www.scsccbkk.org/Use%20a%20Password%20Manager%20for%20Security.pdf</ref>  Some managers even include a random code generator, which can be used to create a strong password that no human needs to remember.  Such passwords are not only unique, but also impervious to "dictionary attacks" and very strong against "brute-force" attacks.
+Although a password manager is a convenience item, it can be a very important one.  Most people cannot remember more than five passwords, so they simply reuse the one or ones over and over.  A password manager is an easy way for people to make unique passwords for each website, and still only need to remember one—the master password for the password manager.<ref>http://www.scsccbkk.org/Use%20a%20Password%20Manager%20for%20Security.pdf</ref>  Some managers even include a random code generator, which can be used to create a strong password that no human needs to remember.  Such passwords are not only unique, but also impervious to "dictionary attacks" and very strong against "brute-force" attacks. A password manager does offer a single point of failure, however, so it must be secure and configured with a strong decryption key (password, keyfile, or whatever else).
 ==Politics==

@@ Line 13: / Line 13: @@
 ===Malicious software (Malware)===
-Viruses, Worms, Trojans, and Spyware are only some of the varieties of [[malicious software]] that threaten security today.  Some will simply try to destroy systems or equipment, other will open vulnerabilities for unauthorized remote access (hacking), while yet more will collect protected information.  Some are more devious, and have functions that fall into multiple categories, such as [[Stuxnet]] and [[Flame (malware)|Flame]].
+Viruses, Worms, Trojans, and Spyware are only some of the varieties of [[malicious software]] that threaten security today.  Some will simply try to destroy systems or equipment, other will open vulnerabilities for unauthorized remote access (hacking), while yet more will collect protected information, or simply [[Ransomware|lock that information and demand a ransom]] be paid to restore access.  Some are more devious, and have functions that fall into multiple categories, such as [[Stuxnet]] and [[Flame (malware)|Flame]].
 ===Malicious hardware===

@@ Line 70: / Line 70: @@
 ==Politics==
-Internet security is not free of politics.  President Obama has been able to curry favor with a number of people by speaking repeatedly on cybersecurity.<ref>https://www.whitehouse.gov/issues/foreign-policy/cybersecurity</ref><ref>https://www.whitehouse.gov/issues/foreign-policy/cybersecurity/summit</ref>  However, this political aspect is in no way the greatest issue.  One of the greatest political risks within Internet security is that of freedom being surrendered in the name of security.  Given enough time and a stable economy, commercial enterprises are able to ensure the Internet is a safe place, or at least that people are safe from the Internet while using it.  However, governments have a tendency to take freedom in exchange for offering security; an offering which may or may not be forthcoming.  In the name of security, things like "the great firewall of China" can be created, which censors available content.  This will certainly reduce the security risks from the outside, but the risk of tyrannical dictatorship from inside is too great for this to be allowed by the people.
+Internet security is not free of politics.  Former President [[Obama]] has been able to curry favor with a number of people by speaking repeatedly on cybersecurity.<ref>https://www.whitehouse.gov/issues/foreign-policy/cybersecurity</ref><ref>https://www.whitehouse.gov/issues/foreign-policy/cybersecurity/summit</ref>  However, this political aspect is in no way the greatest issue.  One of the greatest political risks within Internet security is that of freedom being surrendered in the name of security.  Given enough time and a stable economy, commercial enterprises are able to ensure the Internet is a safe place, or at least that people are safe from the Internet while using it.  However, governments have a tendency to take freedom in exchange for offering security; an offering which may or may not be forthcoming.  In the name of security, things like "the great firewall of China" can be created, which censors available content.  This will certainly reduce the security risks from the outside, but the risk of tyrannical dictatorship from inside is too great for this to be allowed by the people.  Likewise, the push for "back-doors" in encryption is supposedly intended to protect individuals from attackers, while allowing governments and other companies to easily decrypt all data at will, for "security" reasons. Not only is this impractical, as "Back doors" always weaken security over-all (and it is only a matter of time before attackers gain access through the the back door as well), but it also gives any number of agencies full access to private information.
 ==References==

@@ Line 66: / Line 66: @@
 ===Password managers===
-Almost everyone has seem warnings when they created online accounts to never use the same password as they have on any other website.  They put that message there for a reason.  One could either say it is there because they was to keep you safe, or that it is in place so they do not get sued when people do just this, and have someone break into their account later.  Either way, the fact remains that using the same password over and over puts people very much at risk.  If any one of those websites is compromised, every other account such people hold can also be taken over.  It is often for this reason that a few people occasionally lose their entire digital life.<br />
+Almost everyone has seen warnings when they created online accounts to never use the same password as they have on any other website.  They put that message there for a reason.  One could either say it is there because they want to keep the user safe, or that it is in place so they do not get sued when people do just this, and have someone break into their account later.  Either way, the fact remains that using the same password over and over puts people very much at risk.  If any one of those websites is compromised, every other account such people hold can also be taken over.  It is often for this reason that a few people occasionally lose their entire digital lives.<br />
 Although a password manager is a convenience item, it can be a very important one.  Most people cannot remember more than five passwords, so they simply reuse the one or ones over and over.  A password manager is an easy way for people to make unique passwords for each website, and still only need to remember one—the master password for the password manager.<ref>http://www.scsccbkk.org/Use%20a%20Password%20Manager%20for%20Security.pdf</ref>  Some managers even include a random code generator, which can be used to create a strong password that no human needs to remember.  Such passwords are not only unique, but also impervious to "dictionary attacks" and very strong against "brute-force" attacks.

@@ Line 16: / Line 16: @@
 ===Malicious hardware===
-Although this risk is rare, hardware can actually be installed which also poses a risk to Internet security.  This hardware can be designed to perform any number of tasks, depending on the purpose.  Such hardware is often attached in-line with a normal cable, such as the keyboard or network cable.
+Although this risk is rare, hardware can actually be installed which also poses a risk to Internet security.  This hardware can be designed to perform any number of tasks, depending on the purpose.  Such hardware is often attached in-line with a normal cable, such as the keyboard or network cable.  However, chips of this nature can also be embedded in a device, whether build right into the motherboard, or soldered on after manufacture.
 ===Phishing===

@@ Line 10: / Line 10: @@
 ===Denial-of-service attacks===
-The denial-of-service attack is unlike most others in that it does not require any infiltration of the target.  Anyone with enough computers (or a botnet) can perpetrate this attack.  While systems have evolved to resist "the ping of death," they can still be overloaded or disconnected by their Internet Service Provider (ISP).  In this attack, a target is usually flooded with "head" requests, which come at a rate greater than the server can respond.  Eventually, the server will either overload and crash, or as usually intended by the attacker, the ISP will deny service to the target because the flood of traffic is slowing down their network.  Servers and computer systems can be designed to resist these attacks, but the flood of requests alone can result in a service denial.
+The denial-of-service attack is unlike most others in that it does not require any infiltration of the target.  Anyone with enough computers (or a [[botnet]]) can perpetrate this attack.  While systems have evolved to resist "the ping of death," they can still be overloaded or disconnected by their [[Internet service provider|Internet Service Provider]] (ISP).  In this attack, a target is usually flooded with "head" requests, which come at a rate greater than the server can respond.  Eventually, the server will either overload and crash, or as usually intended by the attacker, the ISP will deny service to the target because the flood of traffic is slowing down their network.  Servers and computer systems can be designed to resist these attacks, but the flood of requests alone can result in a service denial.
 ===Malicious software (Malware)===

@@ Line 7: / Line 7: @@
 A wide variety of dangers and risk exist, which Internet security efforts must try to avoid or resolve.  The following are some (but not all) of these dangers.
 ===Vulnerabilities/flaws===
-One serious risk to Internet security is that of vulnerabilities in the systems already in use.  Once found, these vulnerabilities must be fixes (usually using software patches), but with so many different parts of so many different systems in play today, there is almost guaranteed to be a problem somewhere that can be exploited if anyone finds it.  These "zero-day" vulnerabilities are an ongoing problem, since by definition they are yet unknown.  However, another problem is that once such an issue is discovered, not everyone installs the patch or update required to resolve the issue.  Once the patch is released, malicious users can examine the fix and immediately go to work trying to find unpatched systems which can be attacked using this new method.
+One serious risk to Internet security is that of vulnerabilities in the systems already in use.  Once found, these vulnerabilities must be fixed (typically using software patches), but with so many different parts of so many different systems in play today, there is almost guaranteed to be a problem somewhere that can be exploited if anyone finds it.  These "zero-day" vulnerabilities are an ongoing problem, since by definition they are yet unknown.  However, another problem is that once such an issue is discovered, not everyone installs the patch or update required to resolve the issue.  Once the patch is released, malicious users can examine the fix and immediately go to work trying to find unpatched systems which can be attacked using this new method.
 ===Denial-of-service attacks===

@@ Line 2: / Line 2: @@
 ==Technical meaning==
-To an Information Technology expert, Internet security involves the prevention of access and modification of information on the Internet at all seven layers of the Internet.  For the layman, it is simply protection for personal devices, servers (including root servers, and all Internet hubs and distribution points), networked machines and equipment, and the connections in between.  Efforts in Internet security can range from the development of a better firewall, to the development of a safer way to transfer packets.
+To an Information Technology expert, Internet security involves the prevention of access and modification of information on the Internet at all seven layers of the Internet.  For the layman, it is simply protection for personal devices, servers (including root servers, and all Internet hubs and distribution points), networked machines and equipment, and the connections in between.  Efforts in Internet security can range from the development of a better [[Firewall (computing)|firewall]], to the development of a safer way to transfer packets.
 ==Dangers==