Aim Higher College: A Case Study

741 Words2 Pages

The Aim Higher College’s system administrators and network engineers have described seeing some strange behaviors such as high levels of traffic from many hosts that are causing system outages. The web servers of the college have been shutting down frequently by this traffic, it must be from a hacker group trying to attack the school with malicious software. I will review the network traffic from the college’s intrusion detection system and use an intrusion prevention system to block off these threats from the hackers.
The first odd network behavior that was reported by the network engineers and the system administrators was an analysis that showed that a single host on the network is opening hundreds of SSH sessions to every single other host on the Aim Higher College’s network every minute. This attacker or hacker is flooding the network with the SSH sessions to bring the web servers down to get some classified information. The second odd behavior was reported that hundreds of hosts are constantly sending SYN packets only to one of the web servers on the Aim Higher college’s campus. Furthermore, this attacker is trying to flood one of the web servers just by …show more content…

Watch Guard Fireware has a firewall based IPS the can detect and block of attacks in the proxy policies. When enabling Firebox, this will protect the network from any kind of attack especially zero day threats from the outside world. Also, the IT staff should use a signature-based Intrusion prevention system to that is good for maintaining efficiency and performance protection on the network. Using my suggestions will prevent any more threats in the future for these web servers on the college’s

Open Document