#Brute Force Attack and Countermeasures 01/03/2012
Brute Force Attack A brute force attack scenario consists of hackers exhaustively attempting to authenticate with the service that ensures that a correct password is "input" to grant access to a network terminal or computer s. The attacker tries to authenticate with the victim's computer or service with username lists and random passwords. A successful hack means that a specific victim computer or service of that network itself is compromised. No method can counteract such a hack, and all applications protected by the hacked terminal are at threat. Counterattack A brute force attack can be delayed if the algorithm data is large enough, i.e. cracking all combinations becomes virtually impossible without super-computers. In order to protect the security of a terminal computer, the computer should have a secure kernel and communication channel that allows storing a cryptographic key. Like an IPSec Policy or VNP Encryption via LAN or WiFi. * Require that passwords must be at least six characters long, may not contain a username or any part of a full name, and must contain characters from at least three of the following: * English uppercase letters (A, B, C,...Z) English lowercase letters (a, b, c,...z) Westernized Arabic numerals (0, 1, 2,...9) Non-alphanumeric “metacharacters” (@, #, !, &, and so on.) These are also the same characters used by the attacker to force the right password. This method will only increase the time that hackers would need to spend to crack the password. Other more complex methods are available to mitigate this attack. Neteco provides these and many other services here..! Here is a video that shows one of these attacks. CommentsLeave a Reply |
RSS Feed