home

หน้าแรก
 Computer >> บทช่วยสอนคอมพิวเตอร์ >  >> ระบบเครือข่าย >> ความปลอดภัยเครือข่าย

Network Security Risks: ความเสี่ยงและภัยคุกคามเครือข่ายที่พบบ่อย

Network Security Risks คืออะไร?

ความเสี่ยงที่อาจส่งผลต่อ Confidentiality, Integrity, Availability ของข้อมูลและระบบในเครือข่าย เกิดจาก Threats (ภัยคุกคาม) Exploit Vulnerabilities (ช่องโหว่) สร้าง Impact (ผลกระทบ)

Network Risks / Threats ที่พบบ่อย

1. Malware (Malicious Software)

  • Viruses, Worms, Trojans, Ransomware, Spyware, Adware, Rootkits, Fileless Malware
  • Propagation: Email, Web Download, USB, Network Shares, Exploits

2. Phishing & Social Engineering

  • Email Phishing, Spear Phishing, Whaling, Smishing (SMS), Vishing (Voice)
  • Business Email Compromise (BEC)
  • Credential Harvesting, Malware Delivery

3. DDoS (Distributed Denial of Service)

  • Volumetric, Protocol, Application Layer Attacks
  • Botnets (Mirai, etc.) Overwhelm Bandwidth/Resources
  • Service Unavailable, Revenue Loss, Reputation Damage

4. Man-in-the-Middle (MitM)

  • ARP Spoofing, DNS Spoofing, SSL Stripping, Rogue AP
  • Intercept/Modify Traffic (Credentials, Sessions, Data)

5. Unauthorized Access / Credential Theft

  • Brute Force, Credential Stuffing, Password Spraying
  • Pass-the-Hash, Pass-the-Ticket, Kerberoasting
  • Weak/Default Credentials, Credential Reuse

6. Vulnerability Exploitation

  • Zero-Day (Unknown to Vendor)
  • Known Vulnerabilities (Unpatched - CVE)
  • Exploit Kits, RCE (Remote Code Execution)

7. Insider Threats

  • Malicious Insider (Intentional)
  • Negligent Insider (Accidental)
  • Compromised Insider (Credential Stolen)

8. Misconfiguration & Shadow IT

  • Open Ports, Default Credentials, Exposed Services (RDP, SMB, Databases)
  • Cloud Misconfig (S3 Public, Security Groups)
  • Unauthorized Devices/Apps (Shadow IT)

Network Vulnerability คืออะไร?

จุดอ่อนที่ Intersection ของ Software, Hardware, Organizational Processes ที่ Threat Actors สามารถ Exploit ได้

5 Basic Internet Security Problems

  1. Zero-Day Vulnerabilities
  2. Phishing Scams
  3. Ransomware
  4. Malware
  5. DDoS Attacks

Common Security Risks (OWASP / MITRE ATT&CK Context)

  • Malware (Most Prolific)
  • Password Theft / Credential Compromise
  • Traffic Interception (MitM)
  • Phishing Attacks
  • DDoS
  • Cross-Site Scripting (XSS)
  • Zero-Day Exploits
  • SQL Injection

Network Risk Assessment Process

  1. Asset Inventory: รู้ว่ามีอะไรบ้าง (Hardware, Software, Data, People)
  2. Identify Threats & Vulnerabilities: Threat Modeling, Vuln Scanning, Pen Testing
  3. Assess Current Controls: Firewall, AV, Patch, MFA, Segmentation, Monitoring
  4. Risk Analysis: Likelihood × Impact = Risk Level
  5. Remediation/Mitigation: Patch, Config Harden, Add Controls, Accept/Transfer
  6. Continuous Monitoring: SIEM, Vuln Scanning, Threat Intel, Red Team

Network Security Threats - 3 ตัวอย่างสำคัญ

  1. Phishing: Social Engineering หลอก Credentials/Malware
  2. Ransomware: Encrypt Data + Extort (Double Extortion: Steal+Encrypt)
  3. Brute Force / Credential Attacks: Guess/Reuse Passwords เข้าระบบ

Threat Types แบบละเอียด (MITRE ATT&CK)

  • Ransomware (Every 14 sec globally)
  • Botnets (C2 Infrastructure)
  • Viruses/Worms
  • Phishing (Bulk + Targeted)
  • DDoS
  • Cryptojacking
  • APT (Advanced Persistent Threats)
  • Trojan Horses
  • Supply Chain Attacks
  • Living-off-the-Land (LOLBins)