A Network Impact Analysis
A key part of computer network management is the analysis of the impact of possible threats, as well as the actual impact of attacks that have occurred. Such an analysis is predictive in terms of examining where the network might be attacked and reactive in terms of evaluating attacks and how they compromised network security. The impact analysis leads to either strengthening of the network to resist possible attacks or mitigation of the effects so that the damage is limited.
-
Attacks
-
The first step toward determining what the network impact of an attack might be is to study actual events and predict possible future attacks. Network attacks have particular characteristics that the analysis can define. The source can be external or internal. The method can be via email, a direct connection, wirelessly or through websites. The nature of the attack can be installed software, copying files, destroying files or changing data. The analysis also identifies possible targets.
Vulnerabilities
-
The next step is to look for and examine network vulnerabilities. A network analysis establishes attack trees that detail where an attack might start and which network nodes the attacker could access. It then looks at the company assets the attack might compromise and determines what damage the possible vulnerabilities could entail. This part of the process gives an overview of which network assets are vulnerable to the defined attacks.
-
Assessment
-
Once the analysis has defined the attacks and the vulnerabilities of the network, it can assess the possible impact. Damage might range from the inconsequential copying of unimportant files to the loss of essential data. The analysis determines which types of attacks are the most likely to be successful and which require preventive measures. It can even identify potential targets where an attack can't do any damage, leaving them vulnerable while increasing protection for more important network sections.
Mitigation
-
A final strategic element of the impact analysis is to mitigate the effects of a successful attack. While additional security measures reduce the likelihood of such attacks, mitigation is often less expensive and more effective. Encryption of files addresses privacy and confidentiality concerns, even if an attacker could gain access. A back-up strategy addresses possible data destruction. Once the network impact analysis is complete, it provides information about possible attacks, the security measures that are in place to minimize the number of attacks, and the impact mitigation that reduces the effect of a successful penetration of those measures.
-
References
- Photo Credit Ablestock.com/AbleStock.com/Getty Images