Signs That My Site Hacked Information Technology Essay

Signs That My turn up Hacked breeding Technology EssayAssume you atomic number 18 the possessor of an e-commerce mesh go come in. What ar round of the signs that your weather vane site has been hacked. Discuss the major type of attacks you could watch and resulting damage on your site. Prep be a brief report ground on your findings.You are required to propose web site breeding to integrity of the IT entrepreneurs in your area. Consider at that place are two opinions for somaing the site in-ho pulmonary tuberculosis with existing staff, bring out sourcing the entire operation. Discuss which elections are in the comp whatsoevers best interest and the reason for choosing that opinion. Provide pros and cons for each option. Prepare a report based on your findings.Introduction to Question (1)Hacking use to be defined as One who is proficient at using or architectural planming a computer a computer buff. However, this use has been dour around now, to mean that of a cracker One who uses curriculumming skills to upgrade illegal access to a computer electronic net income or rouse. This development is about this second meaning, cracking. Before we begin I would wish to berth out that galley slaves HATE bats, crackers realise given them a baffling depict. The main differences between the two are that hackers try to make things, crackers try to break things. Hackers made the cyber blank shell what it is today. Hackers program websites (among other things) and they do not try and harm the work of others as is thought in todays society. However, as the word hacker is now in very much(prenominal) common use that it is thought it performer cracker I allow for use the words hacking and cracking for describing these cracking methods.Define question (1)Hacking is not a simple operation or chronological sequence of commands as m some(prenominal) mess think. Hacking is a skill. To hack you must change and adapt your approach depending on the obstacles you come across. Hacking is not a specific term there are to a greater extent types of hacking. dish out for Question (1)Some of the signs that my site has been hackedOne of the goals for a hacker is to hack a website without alerting the website haveer. Months go by, and a website giveer master of ceremoniess a hacked website without knowing the site has been compromised. The website owner whitethorn commemorate some st lop occurrences, but here are some hacked signs that alert the owner of a compromised website. Websites that are hacked squirt sp usher malware, and the hacker sometimes steals your customers tuition.The Eval Base64_decodification exercise at the Bottom of Your CodeThe Eval function is used to hide code in PHP blogs such as Blogger and WordPress. The base64_decode decodes encoded text that you are unable to read when you view your website code files. The hacker places a direction code using eval and base64_decode at the bottom of your PHP file, so you are unable to read the hacked code and dont notice the redirection to the hackers web page. If you did not put the functions on your page, and then your blog or website has plausibly been hacked.Drop in Google Search Engine Results RankIf my site is hacked with a redirection to an online pharmacy, the Google algorithm detects a problem and lowers your face engine rank. If you instruct your rank oft, you notice a hook in rank. You bottomland drop several pages and even hundreds of pages in the search engine results.A trigger-happy Warning Alert in Google plate or FirefoxWhen Google detects a hacked website, Firefox and Chrome use the Google API to show a warning message to drug users. Instead of perceive your website, the web browser shows a red screen alerting the commentator to a hacked website name and address. Users can hit the back button or displace to my site. In virtually cases, the user prefers to click the back button to everywhereturn infectin g the computer. The best way to detect a hacked website is enter your domain realise into Chrome or Firefox and see if the red warning screen shows.Google Indexes Your invest with Pharmacy TextIf your site has been hacked and redirects to a pharmacy, search your domain name with pharmacy text such as Viagra, pharmacy, or meds. Pornographic search phrases are too used to check if your site has been hacked and redirect to freehanded websites. This type of check gives you a heads up, and lets you know the hackers code is somewhere in your website code.Check the .htaccess File on Your Host ServerThe .htaccess file is a part of an Apache server host. One web hack is placing a redirect code in the .htaccess file. Open the .htaccess file located on the bow of your web host directory. Read by the file and locate any odd website addresses. If you render a website address that is not yours in the .htaccess file, your file has been hacked.These tips dish out you identify a hacked webs ite. After I fix the hack, I must identify where my site vulner capability is is located. If I do not identify the security hole, you are susceptible to hacks after you go through the trouble of fixing hacked code.The type of attacks I could expect and the damages countersignature crackingIn most of the cases, user passwords are encrypted to protect the retirement of passwords and maintain security of the system. Password cracking is the touch on of decrypting encrypted passwords. A program that performs cracking is known as password cracker. Some crackers are also capable of disabling password protection system and may cause free access to anyone and the owner leave alone be losing a dowry of information in his web site.Ip spoofingIP spoofing is used to commit criminal activity online and to breach network security. Hackers use IP spoofing so they do not involve caught spamming and to perpetrate denial of military service attacks. These are attacks that involve massive amount s of information being sent to computers over a network in an effort to crash the entire network. The hacker does not get caught because the origin of the messages cannot be determined due to the bogus IP address.IP spoofing is also used by hackers to breach network security measures by using a bogus IP address that mirrors one of the addresses on the network. This eliminates the need for the hacker to allow a user name and password to log onto the network.Hijacking an Authorized SessionWith the ability to generate the correct sequence numbers, an attacker can take over an authorized school term by simply taking over one of the parties to the session. Having inserted himself in the session, the attacker leave simply tell the party taken over that the session has ended, age relateing to the other half of the legitimate session and continuing communication, but this time, according to the attackers dictate. Haven taken over a trusted communication channel, the attacker can th en probe the network for vulnerabilities.Sequesnce GuessingEvery connection between two hosts using transmission crack protocol contain sequence numbers for both data and acknowledgement. These numbers, used by the TCP protocol to determine out-of-order and lost packets, is one of the facilities of the connection-oriented TCP design, to take care reliable delivery to the application layer. The sequence numbers are generated pseudo-randomly and an attacker dexterity ravish spoofed packets to a victim to determine the algorithm generating the sequence numbers, and then use that knowledge to intercept an existing session.RIP AttacksRouting Information protocol (RIP) Routing attacks is practically seen in trackrs which implemented the original RIP. Routing Information Protocol (RIP) is used to distribute routing information within networks, such as shortest- raphs, and ad routes out from the topical anesthetic network. The original version of RIP has no construct in authentica tion, and the information provided in a RIP packet is often used without put forwarding it. An attacker could forge a RIP packet, claiming his host X has the fastest path out of the network. All packets sent out from that network would then be routed through X, where they could be modified or examined. An attacker could also use RIP to effectively impersonate any host, by causing all traffic sent to that host to be sent to the attackers machine instead.Buffer OverflowsA Buffer Overflow is a flaw that occurs when more data is written to a block of memory, or buffer, than the buffer is allocated to hold. Exploiting a buffer overflow allows an attacker to modify portions of the rear end process address space. This ability can be used for a number of purposes, including the followingControl the process executionCrash the processModify internal variablesThe attackers goal is almost always to control the steer process execution. This is accomplished by identifying a function pointer in memory that can be modified, directly or indirectly, using the overflow. When such a pointer is used by the program to direct program execution through a jump or call nurture, the attacker-supplied instruction localisation of function allow be used, thereby allowing the attacker to control the process.In umteen cases, the function pointer is modified to reference a location where the attacker has placed assembled machine-specific instructions. These instructions are commonly referred to as shellcode, in reference to the fact that attackers often wish to spawn a command-line environment, or shell, in the context of the running process.ConclusionIf I cannot connect to my web site or log in to your control panel, I have to contact your web hosting society. The hacker attack has changed your password and I need to get a new one. The hacker might have also changed your email address associated with my account at the web hosting troupe but this is unlikely because the password and the email information are s missly segregated. Anyway, depending on the high society policies, a web hosting firm would either send you a new password over email OR fall back with what they need to send you a new password (because they need to verify that the new password request is legitimate). In some cases, I might need to send a fax because the hackers have messed up your email too.Introduction to Question (2)Nowadays, it seems like everyone is saying, I indigence to site. If you want to build a web site and you know what you want, dont know what you want, trying to mark off about it then we have information for you. If you already own a website or a webmaster looking for the best and latest information on successful website development, then we have the website builder for you. Also on this site we have articles and free eBooks on every aspect of website development, including internet marketing, theater based businesses and affiliate marketing.Define question (2) in that location are many diverse routes a web site owner can go for getting all of the suffice done for his online business. The two directions he could take, whether its hiring in-house or outsourcing to a discipline creation company, allow for many different options and different ways to get your satisfy project done. The route you take can have effect on a number of things, like fictional character of the satiate, your expenses, and the time it will take to get everything done. Since the subject will probably be the most important part of your web site, you will want to take all things into consideration before making your final decision.Answer to Question (2)IN-HOUSE WITH EXISTING STAFFHiring in-house definitely has its own advantages. This is because anytime you have a valuable resource like a police squad of writers in the Internet industry you are able to accomplish many different things because there are so many ways that you can use content on the Internet (it doesnt alwa ys just have to be on-the-scene(prenominal) content). It all really depends on your own companys content unavoidably however. You will be able to train writers and mold their styles to the way you want your content to be written.ADVANTAGESGives you ControlIf design run are part of your business, then keeping it chthonian your control allows you to provide the best services for your customers. This promoter that if your business sells design services, or depends on a strong, dynamic online forepart for the bulk of its revenue, an in-house design team is essential. You dont want to rely on a carryor over whom you do not have complete control to make or break your business.Communicate Better and Save successionInteracting with outsourced talent can be challenging, especially if your fightor is . People under your purview are easier to find and easier to direct, so when you need something done, you can explicate it to them in person.Save (lots of) MoneyYou will find that you w ill keep coin in the long run by using in-house talent. pull down though you will have to make the investment in payroll and infrastructure, over time you get better results and spend little money than you would by hiring an outside firm. In-house design also benefits from the standpoint of project cost. Contractors often will pocket some or all of the difference if they give up a project below cost. If your In-house team completes the project at less(prenominal) cost, that cost savings shows up in your bottom line.DISADVANTAGESMaintenance contract with an external agencyAlthough probably the most expensive approach, maintenance contract with an external agency does provide the best level of service. If the agency provide the right kind of service this can be very much like working with an outsource team. The agency will really get to understand the business, evolve your website on a unfaltering basis and assuage provide all of the benefits of an external agency.Part time con tractorsFor smaller organizations that cannot impart fulltime in-house staff but who wish to enjoy the benefits that come with that approach, there is the option to take on a part-time contractor. These individuals will probably have 2 or 3 websites they manage on a regular basis but still will be able to work more closely with you than an external agency.Ad-hoc specialistsFor larger organisations it may sometimes be appropriate to bring in specialists to compliment an existing in-house team. For illustration specialists in accessibility, usability or design can often work well alongside an in-house team primarily made up of coders.OutsourcingOutsourcing is contracting out the counsel and development of a process or production to external sources. some online businesses have found it desirable to outsource their website. While some businesses lack the in-house expertise, others find the logistics of managing the website distracts their attention from their core competencies and some other find it to be cost-effective. In the present scenario of IT, all organizations whether big or small, depend on outsourcing to stay competitive. This is quite advantageous as a wide range of options is available, in the form of experienced reliable companies offering their services. Outsourcing helps a company to focus on its core business more efficiently.OutsourcingAdvantagesYou can be assured that if you go this route you are leaving all of your content needs in the hands of very well experienced and deft writers writers that have written for the Internet for a long period of time. There will more than likely be a whole team of editors, project managers, and writers and they will have a their system down pat already and will be ready to take on whatever kind of volume you need to push. You will have a windy turnaround time, and therefore you will be able to scale up quite easily. Outsourcing your content will also save you a lot of time and money. Hiring and trainin g in-house writers takes a lot of time and can also be quite expensive. Outsourcing your content to a company usually means you will spend less money because they usually charge less and you wont have to spend money building up your own resources.DisadvantagesOne of the major disadvantages is the differences in writing style that you may see. Outsourcing your content means outsourcing to a number of different writers, all of which have their own unique writing style. Since they have already been trained to write a certain way for the Internet, you will have to make sure that the writers will be able to fulfill your standards in terms of style and SEO needs. For example some people may want a double space after each period and some people like the wizard space approach. It seems like a small problem, but little problems like that can cause a lot of trouble if not worked out before the project gets started. This problem really escalates if you are outsourcing your content to many dif ferent freelancers.Language or cultural differences Struggling to understand your technical school support specialist can make a frustrating space even worse. Unfortunately, many small businesses choose shoreward outsourcing as their least-expensive option, while not considering the time and aggravation fatigued on communication issues. This can be mitigated either by carefully interviewing various offshore firms and giving them a test drive, or by hiring a local firm. The latter may also allow you to have the specialist on-site, which is highly recommended for handling most IT support needs.Not part of the team Because outsourced IT specialists are there only when scheduled or when you need them to fix a problem, youll spend time bringing them up to speed when issues do scrape or when you want them to provide advice on future technology initiatives. Again, there is a solution Get an outsourced firm involved in your IT needs on an ongoing basis via managed services.Companies bes t interestThe best for my company would be outsourcing because its gives us a saver web-hosting and trusted from virus. Although its not sixpenny but it would be easy for us because its been maintain and updated always. This could increase our web viewers and customers too.ConclusionOnce you have a team of writers, you will always have to find a way to keep them particular or else you will risk losing them. If you dont have the ability to keep a team of writers busy for a substantial amount of time, then hiring in-house writers would arouse to be a big waste of time. Your turnaround time will also not be as fast, and you will spend more time dealing with your writers time that probably could have better been spent elsewhere. A good route to go (a route that many companies take) is to convey a few in-house writers as well as outsource content needs that make sense to outsource. The Internet business calls for unique situations and needs, and the route you go with your content cr eation should definitely be based on these specific needs. One thing to be aware of is that some information technology consultants that you outsource to, will in turn outsource services to their own partners. Look for companies that take final responsibility for your system, no subject whether they or a partner provided a particular service. This will help make things simpler for your organization, especially at times of stress and concern when you most need things to be easy.