{"id":1498,"date":"2021-06-25T14:50:07","date_gmt":"2021-06-25T11:50:07","guid":{"rendered":"https:\/\/gmkas.com\/en\/?page_id=1498"},"modified":"2023-06-06T16:33:15","modified_gmt":"2023-06-06T13:33:15","slug":"cyber-security","status":"publish","type":"page","link":"https:\/\/gmkas.com\/en\/cyber-security\/","title":{"rendered":"CYBER SECURITY"},"content":{"rendered":"

[vc_row][vc_column icons_position=”left”][vc_column_text]Cyber security is the practice of protecting computers, servers, mobile devices, electronic systems, networks, and data from malicious attacks. It is also known as information technology security or electronic information security. The term is applicable in contexts ranging from businesses to mobile computing, and can be divided into several common categories.<\/p>\n

GMKA<\/strong> <\/span>continues to develop new solutions in the field of Cyber Security<\/strong><\/span> every day\u2026<\/p>\n

\u2022 Network security is the practice of protecting a computer network from intruders, whether they are targeted attackers or opportunistic malware.
\n\u2022 Application security focuses on protecting software and devices from threats. A compromised application may gain access to data designed to protect it. Effective security begins before a program or device is distributed, when it is still in the design phase.
\n\u2022 Information security maintains the integrity and confidentiality of data both in storage and in transfer.
\n\u2022 Operational security includes processes and decisions regarding the treatment and protection of data assets. This includes the authorizations users have to access a network and the procedures that determine how and where data can be stored or shared.
\n\u2022 Disaster recovery and business continuity define how an organization responds to a cybersecurity incident or other event that causes loss of porcess or data. Disaster recovery policies determine how the organization restores its processes and information to return to the same operating capacity as before the event. Business continuity is the plan by which the organization falls back on while trying to operate without specific resources.
\n\u2022 End-user training addresses the most unpredictable cybersecurity factor: Anyone who does not follow good security practices can accidentally infect another secure system. Teaching users how to delete suspicious email attachments, not to plug in unidentified USB drives, and various other important lessons is vital to the security of any organization.[\/vc_column_text][vc_empty_space hide_on_wide=”” hide_on_desktop=”” hide_on_notebook=”” hide_on_tablet=”” hide_on_mobile=””][\/vc_column][\/vc_row][vc_row][vc_column icons_position=”left”][vc_single_image image=”3567″ img_size=”large” alignment=”center”][vc_empty_space hide_on_wide=”” hide_on_desktop=”” hide_on_notebook=”” hide_on_tablet=”” hide_on_mobile=””][\/vc_column][\/vc_row][vc_row][vc_column icons_position=”left”][vc_column_text]<\/p>\n

THE SCALE OF THE CYBER THREAT<\/strong><\/h5>\n

The global cyber threat continues to evolve rapidly with an increasing number of data breaches every year. It is revealed that a staggering 7.9 billion records were subject to data breaches in the first nine months of 2019 alone. This figure is more than double the number of registrations (112%) that emerged in the same period of 2018.
\nHealthcare, retailers, and government agencies suffered the most from breaches by malicious criminals responsible for most incidents. Some of these industries are more attractive to cybercriminals as they collect financial and medical data, but any business that uses a network can become a target of attacks on clients and client data or corporate espionage.
\nGMKA predicts that as the scale of the cyber threat continues to increase, worldwide spending on cybersecurity solutions will reach $133.7 billion by 2022. Governments around the world have guided organizations to help them implement effective cybersecurity practices in response to the growing cyber threat.
\nTo combat the proliferation of malicious code and aid early detection, this framework recommends continuous, real-time monitoring of all electronic resources.<\/p>\n

TYPES OF CYBER THREATS<\/strong><\/h5>\n

There are three layers of threats facing cybersecurity:<\/p>\n

1. Cybercrime: Involves single actors or groups targeting systems for financial gain or business disruption.
\n2. Cyberattack: Usually involves politically motivated information gathering.
\n3. Cyber terrorism: Designed to undermine electronic systems in a way that causes panic or fear.
\nSo how do malicious actors gain control of computer systems? Here are some common methods used to threaten cybersecurity:<\/p>\n

MALWARE<\/strong><\/h5>\n

A malicious software is also referred to as \u201cMalware\u201d<\/strong>. As one of the most common cyber threats, malware is software created by a cybercriminal or hacker to corrupt or damage a legitimate user’s computer. Typically spread through a spam email attachment or legitimate-looking download, malware can be used by cybercriminals to make money or in politically motivated cyberattacks.<\/p>\n

There are several types of malware:<\/p>\n

    \n
  • Virus:<\/strong> A program that self-replicates, attaches itself to clean file and spreads to computer system, infects files using malicious code.<\/li>\n
  • Trojans: <\/strong> A type of malware disguised as legitimate software. Cybercriminals trick users into installing trojans on their computers, thereby damage their computers or collect data.<\/li>\n
  • Spyware:<\/strong> A program that secretly records what a user is doing so that cybercriminals can use this information. For example, spyware can capture credit card information.<\/li>\n
  • Ransomware:<\/strong> A malware that locks and threatens to delete a user’s files and data unless a ransom is paid.<\/li>\n
  • Adware:<\/strong> Advertising software that can be used to spread malware.<\/li>\n
  • Botnets:<\/strong> Computer networks that spread malware that cybercriminals use to perform online tasks without the user’s consent.<\/li>\n
  • SQL injection:<\/strong> SQL (structured query language) injection is a type of cyberattack used to check and steal data from a database. Cybercriminals exploit vulnerabilities in data-driven applications to insert malicious code into a database via a malicious SQL statement. This gives them access to sensitive information contained in the database.<\/li>\n<\/ul>\n
    PHISHING<\/strong><\/h5>\n

    Phishing is when cybercriminals target victims using emails that ask for sensitive information and appear to be from a legitimate company. Phishing attacks are often used to trick people into transferring credit card data and other personal information.<\/p>\n

    Tampering Attack (MITM)<\/strong><\/p>\n

    A tampering attack is a type of cyber threat in which cybercriminals intercept communication between two people in order to steal data. For example, on an unsecured Wi-Fi network, an attacker could withhold data passed to and from the victim’s device.<\/p>\n

    Denial of Service attack (DoS)<\/strong><\/p>\n

    A denial of service attack is when cybercriminals block networks and servers with traffic, preventing a computer system from fulfilling legitimate requests. This renders the system unusable, preventing an organization from performing vital functions.<\/p>\n

    The latest cyber threats<\/strong><\/p>\n

    What are the latest cyber threats that individuals and organizations need to protect against? Here are some of the latest cyber threats reported by GMKA Cyber.<\/strong><\/span><\/p>\n

    DRIDEX MALWARE<\/strong><\/h5>\n

    Dridex is a financial trojan with various capabilities. It has been affecting victims and infecting computers through phishing emails or existing malware since 2014. Capable of stealing passwords, banking information and personal data that can be used in fraudulent transactions, Dridex has caused massive financial losses amounting to hundreds of millions.
    \nTo protect against attacks, GMKA CYBER<\/strong> <\/span>recommends making sure that \u201cdevices are patched, antivirus is turned on, up-to-date, and files are backed up\u201d.
    \nScammers<\/strong><\/p>\n

    In February 2020, users were warned about cybercriminals who commit trust fraud by using dating sites, chat rooms and apps. Criminals take advantage of people looking for new partners and trick victims into giving their personal data.<\/p>\n

    Emotet malware<\/strong><\/p>\n

    GMKA warns of a widespread global cyber threat from Emotet malware<\/strong>..
    \nEmotet<\/strong> is an advanced trojan that can steal data and install other malware as well. Emotet excels with uncomplicated passwords. This is a reminder of the importance of creating a secure password to protect against cyber threats.<\/p>\n

    End user protection<\/strong><\/p>\n

    End-user protection, or endpoint security, is an essential element of cybersecurity. Ultimately, the end user is an individual who accidentally installs malware or another form of cyber threat on their desktop computer, laptop, or mobile device.<\/p>\n

    So how do cybersecurity measures protect end users and systems? First of all, cyber securityrelies on cryptographic protocols to encrypt emails, files and other important data. This not only protects the transmitted information, but also protects against loss or theft.
    \nIn addition, end-user security software scans for pieces of malicious code on computers, quarantines that code, and then removes it from the device. Security programs can even detect and remove malicious codes hidden in the Master Boot Record (MBR)<\/strong>. They are designed to encrypt or delete data on the computer’s hard drive.
    \nElectronic security protocols also focus on real-time malware detection. Most of these help defend against viruses or trojans (polymorphic and metamorphic malware) that change shape with each run, using intuitive and behavioral analysis to monitor a program’s behavior and code. Security programs can confine potentially malicious programs to a virtual bubble separate from the user’s network to analyze their behavior and learn how to better detect new infections.
    \nSecurity programs continue to develop new defenses as GMKA cybersecurity experts identify new threats and new ways to combat them. To get the most out of end-user security software, employees need to be trained on how to use the software. Most importantly, keeping this security software running and updated frequently ensures that it can protect users against the latest cyber threats.<\/p>\n

    Cybersecurity tips: Protect yourself against cyber attacks<\/p>\n

    How can businesses and individuals be protected against cyber threats? Here are our top cybersecurity tips:
    \n1. Update your software and operating system: This means you’re getting the most up-to-date security patches.
    \n2. Use an antivirus software: Security software detects and removes threats. Keep your software up to date to ensure the best level of protection.
    \n3. Use strong passwords: Make sure your passwords are not easy to guess..
    \n4. Do not open email attachments from unknown senders: These attachments may be infected with malware.
    \n5. Do not click on links in emails from unknown senders or on unrecognized websites: This is a common method of spreading malware.
    \n6. Avoid using unsecured Wi-Fi networks in public places: Unsecured networks leave you vulnerable to attacks to interfere with operations.[\/vc_column_text][vc_empty_space hide_on_wide=”” hide_on_desktop=”” hide_on_notebook=”” hide_on_tablet=”” hide_on_mobile=””][\/vc_column][\/vc_row][vc_row][vc_column icons_position=”left”][vc_single_image image=”3551″ img_size=”large”][vc_empty_space hide_on_wide=”” hide_on_desktop=”” hide_on_notebook=”” hide_on_tablet=”” hide_on_mobile=””][vc_tta_accordion color=”white” active_section=”0″ collapsible_all=”true”][vc_tta_section title=”A BRIEF LOOK AT THE CYBER WORLD” tab_id=”a-brief-look-at-the-cyber-world”][vc_column_text]\u2022 The Concept of Cybercrime and Its Types
    \n\u2022 Cybercrimes Specific to Turkey
    \n\u2022 Cybercrimes in Turkey with Examples
    \n\u2022 Cybercrimes and Consequences Not Reflected on the Media
    \n\u2022 Cyber Threat, Cyber Blackmail Concepts in Turkey
    \n\u2022 Cybercrime Statistics from Turkey
    \n\u2022 Cybercrimes Around the World
    \n\u2022 Cybercrime Around the World With Examples
    \n\u2022 Malware as a Cyber Weapon Tool
    \n[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”PASSWORD SECURITY, DISK ENCRYPTION AND ANALYSIS METHODS” tab_id=”password-security-disk-encryption-and-analysi-methods”][vc_column_text]\u2022 Importance of Password and Encryption in Cybercrime
    \n\u2022 Disk Encryption Methods and Tools for Data Retention
    \n\u2022 Password Cracking Techniques
    \n\u2022 Password Tests for Windows, Linux, MacOS systems
    \n\u2022 Current Password Cracking Techniques and Tools
    \n\u2022 Finding TrueCrypt Protected Disk Password
    \n\u2022 Identification of Encrypted \u2013hidden- areas in Disc Analysis
    \n\u2022 Password Cracking Processes for Encrypted Documents and Files
    \n\u2022 Determination of Files Protected by Steganography and Data Extraction
    \n[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”DDOS ATTACKS AND ANALYSIS METHODS” tab_id=”ddos-attacks-and-analysis-methods”][vc_column_text]\u2022 DoS\/DDoS Fundamentals
    \n\u2022 DDoS Attacks and Cyber Blackmail
    \n\u2022 Turkey-Specific DDoS Statistics
    \n\u2022 DDoS Attack Tools and Methods
    \n\u2022 A Example DDoS Attack and Analysis
    \n\u2022 Botnet Concept and Areas of Use
    \n\u2022 BotNet Creation Tools
    \n\u2022 IP Spoofing in DDoS Attacks
    \n\u2022 How do DDoS Prevention Systems work?
    \n\u2022 How DDoS Prevention Systems Can Be Bypassed?
    \n\u2022 DDoS Attacks Analyses
    \n[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”OPEN SOURCE INTELLIGENCE GATHERING METHODS” tab_id=”open-source-intelligence-gathering-methods”][vc_column_text]\u2022 Open Source Intelligence Gathering Concept
    \n\u2022 What is it, What Does It Do?
    \n\u2022 Areas of Use Today
    \n\u2022 Open Source Intelligence Tools
    \n\u2022 Using Google, Shodan and Other Search Engines for Intelligence Purposes
    \n\u2022 What Can Be Obtained by Using Google?
    \n\u2022 Corporate Firms Hacked by Using Open Intelligence
    \n\u2022 Real Examples from Turkey
    \n\u2022 Intelligence Gathering on the Internet with Examples
    \n[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”CYBERCRIME ANALYSIS METHODS” tab_id=”cybercrime-analysis-methods”][vc_column_text]\u2022 Fundamental Forensic Analysis Methods
    \n\u2022 Collecting Data through Hacked Systems
    \n\u2022 Memory Analysis Methods
    \n\u2022 Memory Analysis Tools and Methods
    \n\u2022 Memory Analysis and Challenges in Linux Systems
    \n\u2022 Memory Analysis in Windows Systems
    \n\u2022 Memory Analysis of a Malware-Infected System
    \n\u2022 Profiling from Character Analysis
    \n[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”LOG INVESTIGATION AND FORENSIC ANALYSIS IN IT NETWORKS” tab_id=”log-investigation-and-forensic-analysis-in-it-networks”][vc_column_text]\u2022 Basic Working Structure of the Internet
    \n\u2022 Package, Protocol Concepts and Their Importance in terms of Network Forensics
    \n\u2022 Network Traffic Analysis Tools
    \n\u2022 DPI Systems and Areas of Use
    \n\u2022 Data Extraction in Network Traffic
    \n\u2022 E-mail Header Analysis
    \n\u2022 IP Storage Methods
    \n\u2022 Analysis of Web Based Attacks
    \n\u2022 Inadequacy of Today\u2019s Cyber Defense Systems
    \n\u2022 A Sample Web Hacking Demo and Network Analysis
    \n\u2022 A Sample Web Hacking Demo and Log Analysis
    \n\u2022 Log Deletion Methods and Tools on Windows \/ Linux Systems
    \n[\/vc_column_text][\/vc_tta_section][\/vc_tta_accordion][\/vc_column][\/vc_row]<\/p>\n<\/section>","protected":false},"excerpt":{"rendered":"

    [vc_row][vc_column icons_position=”left”][vc_column_text]Cyber security is the practice of protecting computers, servers, mobile devices, electronic systems, networks, and data from malicious attacks. It is also known as…<\/p>\n","protected":false},"author":1,"featured_media":2783,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":[],"_links":{"self":[{"href":"https:\/\/gmkas.com\/en\/wp-json\/wp\/v2\/pages\/1498"}],"collection":[{"href":"https:\/\/gmkas.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/gmkas.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/gmkas.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/gmkas.com\/en\/wp-json\/wp\/v2\/comments?post=1498"}],"version-history":[{"count":32,"href":"https:\/\/gmkas.com\/en\/wp-json\/wp\/v2\/pages\/1498\/revisions"}],"predecessor-version":[{"id":5683,"href":"https:\/\/gmkas.com\/en\/wp-json\/wp\/v2\/pages\/1498\/revisions\/5683"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/gmkas.com\/en\/wp-json\/wp\/v2\/media\/2783"}],"wp:attachment":[{"href":"https:\/\/gmkas.com\/en\/wp-json\/wp\/v2\/media?parent=1498"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}