Skip to content

Understanding Attack Surface In Computer Security

Information security is important to people of all ages, We all have a role to make cyberspace secure for ourselves and others. Whenever you are online, you are vulnerable, that is why you have to be cyber vigilant. You can outsmart attackers with security awareness. It is called Human Firewalls.


It It For data protection, security and privacy go hand in hand. Data privacy relates to business policies that define appropriate data management such as collection, retention and deletion. In this article, I want to talk about all that you need to know about Attack Surface in computer security.

Cyber Security consists of methods for protecting networks, devices and data from unauthorized access and ensuring the Confidentiality, Availability and Integrity of information.
Also, Information Security includes Cybersecurity and the physical security of devices.

This seeks to explore vulnerability in software and computer systems. The attackers always carry out attacks for their own gain. They also carry out attacks in violation of the intended use of the computer system. Threats that attackers can create include system failure and steal of information.
These are any exposed places in your environment that an attacker can use to perpetuate their operation. It allows them to gain initial access to networks. It is the duty of a Network Security Administrator to identify attack surfaces and reduce their sizes and also decrease the risk of attacks. Cyber threats pose security risks to your business and your personal data.
Also, Malware can erase your entire data. Attackers can also steal your data. A Cybercriminal can also use your computer to attack others. There is no guarantee that even with the best precautions, some of these things would not occur. However, there are steps that you can take to minimize the chances.

Roles Of Cyber Warrior In Network Security Threats

A cyber-warrior is a person who engages in cyberwarfare, whether for personal reasons or out of patriotic or religious belief. Cyberwarfare may be pursued either to defend computer and information systems or to attack them. Cyber-warriors come in different forms, depending on their roles, but all deal with information security in one form or another.
Cyber-warriors wage war using information technology. They may attack computers or information systems through hacking or other related strategies, or defend them from their counterparts. Cyber-warriors also may find better ways to secure a system by finding vulnerabilities through hacking and other means and closing those vulnerabilities before other hackers find and exploit them.
Given this, the term cyber-warrior has different meanings depending on the context in which it is used; the term may refer to someone with malicious intent (the attacker) or a professional who is working to defend against such attackers. The latter context is an emerging career field, similar to ethical hacking.

Some facts 

  • They always take advantage of vulnerabilities in common OS and Applications.
  • Facts about Cyber Warriors
    They adopt the use of Espionage, extortion and embarrassment.
  • They are well funded by governments because they are representing government interests.
  • They make use of existing exploit methods and they are also capable of developing new ones.
  • They always look for how to create a “Zero-Day”. Zero-day happens when you discover new vulnerability or attack path and you never knew how to fix it.
  • This always gives Cyber warriors enough time to launch more attacks until developers can find a solution to the attack created.
  • Once these attacks are discovered, the software vendor will issue a patch update to correct it.  That is why once a particular attack method is used, it might not be possible to use it again.


Roles Of Cyber Criminals In Security Threats

A Cyber Criminal belongs to an organized group. Their plan is to attack devices and steal data. They always threaten to corrupt data so as to throw the entire organization into disarray. In this article, I want to talk about the roles of Cyber Criminals in Security threats. Follow me as we look at it together in this article. 
Cybercriminals also adopt the use of ransomware. Ransomware is malicious software that infects your computer and displays messages demanding a fee to be paid in order for your system to work again. This class of malware is a criminal money-making scheme that can be installed through deceptive links in email messages or websites.
Their motivation is money. Cybercriminals can target POS and e-commerce websites and sell card information gathered to the highest bidders. They can also decide to use the information themselves.

How do they achieve that…

Through Spear Phishing where emails are sent to specific users that they wanted to target for the attack. Once their computers are infected, it will open doors for more attacks.

Role Of Hacktivists In Network Security Threats

People are always at risk of consequence from cyber threats. Some bad actors make use of phishing where people are tricked to enter their details while they think they are on the right website. Some of these are sent through email that looks like original emails.
Hacktivists are groups of criminals who unite to carry out cyber attacks in support of political causes. Hacktivists typically target entire industries but sometimes attack specific organizations that they feel don’t align with their political views or practices. In some cases, hacktivists have targeted organizations not based on the victim organization’s beliefs but the clients and partners they do business with.
Among the best-known hacktivist groups is “Anonymous,” which has carried out hundreds of cyber-attacks including Operation Payback, which included a series of Distributed Denial of Service (DDoS) attacks that disrupted victims’ websites, preventing legitimate users from accessing them. A DDoS attack is launched from multiple computers running specialized software that generates a large amount of traffic directed to a website with the intent of overwhelming the system so that it stops responding to legitimate user requests.
Countries that are unable to match the U.S. in terms of military technology have resorted to cyberwarfare, a method that can still do a lot of damage in terms of economic cost. Various agencies in the U.S. are under constant attack from numerous countries. In response, the U.S. military is training war veterans and wounded soldiers who can no longer fight in the field in the art of cyberwarfare to become cyber warriors and continue defending their country in this new form of battle
One law firm fell victim to a cyber-attack from a hacktivist group due to the law firm’s representation of a client linked to a high-profile legal case the hacktivist group stole emails from the law firm, many of which were protected under attorney-client privilege and publicly posted them on the internet. At the time of this writing, there are over 80 different hacktivist groups in existence.
The email often include links that take them to a masquerading website.
Through this, people lose their login details to hackers. There is some kind of hackers that are motivated because they do not agree with some political and social policies of the government. They are often referred to as Hacktivists.
At times, Hackers can set up botnets on servers without the knowledge of the Admin. A botnet is a network of private computers infected with malicious software and controlled as a group without the owners’ knowledge. E.g to send spam emails.
Action Point
PS: If you would like to have an online course on any of the courses that you found on this blog, I will be glad to do that on an individual and corporate level, I will be very glad to do that I have trained several individuals and groups and they are doing well in their various fields of endeavour. Some of those that I have trained includes staffs of Dangote Refinery, FCMB, Zenith Bank, New Horizons Nigeria among others. Please come on Whatsapp and let’s talk about your training. You can reach me on Whatsapp HERE. Please note that I will be using Microsoft Team to facilitate the training. 

I know you might agree with some of the points that I have raised in this article. You might not agree with some of the issues raised. Let me know your views about the topic discussed. We will appreciate it if you can drop your comment. Thanks in anticipation.


Fact Check Policy

CRMNIGERIA is committed to fact-checking in a fair, transparent and non-partisan manner. Therefore, if you’ve found an error in any of our reports, be it factual, editorial, or an outdated post, please contact us to tell us about it.


Fact Check Policy