Security Auditing and Administration of Corporate Networks 
  • About Us
  • Networking
  • Services
  • Blog
  • Internet Goes on Strike
#Brute Force Attack and Countermeasures 01/03/2012
0 Comments
 

Brute Force Attack

A brute force attack scenario consists of hackers exhaustively attempting to authenticate with the service that ensures that a correct password is "input" to grant access to a network terminal or computer s. The attacker tries to authenticate with the victim's computer or service with username lists and random passwords. A successful hack means that a specific victim computer or service of that network itself is compromised. No method can counteract such a hack, and all applications protected by the hacked terminal are at threat. 

Counterattack 
A brute force attack can be delayed if the algorithm data is large enough, i.e. cracking all combinations becomes virtually impossible without super-computers. In order to protect the security of a terminal computer, the computer should have a secure kernel and communication channel that allows storing a cryptographic key. Like an IPSec Policy or VNP Encryption via LAN or WiFi.

* Require that passwords must be at least six characters long, may not contain a username or any part of a full name, and must contain characters from at least three of the following: *
                                                       

                                                         English uppercase letters (A, B, C,...Z) 

                                                         English lowercase letters (a, b, c,...z) 

                                                         Westernized Arabic numerals (0, 1, 2,...9) 

                                                         Non-alphanumeric “metacharacters” (@, #, !, &, and so on.)




These are also the same characters used by the attacker to force the right password.
This method will only increase the time that hackers would need to spend to crack the password. Other more complex methods are available to mitigate this attack.



Neteco provides these and many other services here..!

Here is a video that shows one of these attacks.
 


Comments




Leave a Reply

    Neteco

    Corporate Network Administration, Security Consulting and Auditing.

    Archives

    February 2012
    January 2012
    December 2011

    Categories

    All
    Attack Vectors
    Blog Series
    Mailings

    RSS Feed