NAME: MBIJI SAMUEL CHINEMERE
DEPT: COMPUTER SCIENCE
LEVEL: HND 1(ONE)
COURSE TITLE: CISCO CERTIFICATION
COURSE CODE: COM 315
DATE: 17/01/2018


ASSIGNMENT 1(ONE)

According to server security, list and explain in brief the cyber chain kill process.

1. Reconnaissance
2. Weaponization
3. Delivery
4. Exploitation
5. Installation
6. Command and control
7. Actions on objectives


1. RECONNAISSANCE: This is the process of getting information about a cyber environment for intrusion purpose, by gathering email addresses, learning names, and getting a clear picture of the environment. This is process is done to locate a backdoor into the network. 

2. WEAPONIZATION: Preparation of attack tools, such as Trojan horses, explosions and data. This is usually a collection of tools that automate the arming. 
Place prepared tools in infected files that the victim will use (such as PDFs or Microsoft Office files) when they are delivered.

3. DELIVERY: Upload of prepared "attack tools" to the attacked environment, through a pre-prepared attack vector (such as email attachments, web pages, or USB media).

4. EXPLOITATION: After delivering the "attack tools" to the victim machine, the code is executed in the attacked environment. Most often exploits are vulnerabilities in applications or the operating system of an attacked computer. There are much simpler burglaries that use configuration errors or user unawareness.

5. INSTALLATION: Installing a Trojan horse in the victim's system allows the permanent existence in the attacked environment. 

6. COMMAND AND CONTROL: Take control of the infected device. Typically, the compromised computer connects to the Control and Control computer through a specially created communication channel.

7. ACTIONS ON OBJECTIVE: It is only at this point that the right action is taken to achieve the objectives. Typically this is a penetration, analysis, collection and copying of data. 
Alternatively, a burglar may use the compromised computer only as a starting point for further attacks and the location from which the trusted victim network is penetrated.