Common network protocols and vulnerabilities in Cybersecurity - Step-by-Step Execution

Concept Flow - Common network protocols and vulnerabilities

Start: Device wants to communicate

↓

Choose Protocol: HTTP, FTP, SMTP, etc.

↓

Send Data over Network

↓

Potential Vulnerabilities

↓

Data Intercept

↓

Security Measures

↓

End

This flow shows how devices use network protocols to communicate, how vulnerabilities can occur during data transmission, and how security measures help protect data.

Execution Sample

Cybersecurity

Device sends HTTP request
Network transmits data
Attacker intercepts data
Data is exposed
Security updates applied

This sequence shows a device sending data using HTTP, an attacker intercepting it, and then security measures being applied.

Analysis Table

Step	Action	Protocol Used	Vulnerability	Result
1	Device sends data	HTTP	None yet	Data sent over network
2	Data travels network	HTTP	Possible interception	Data exposed to attacker
3	Attacker intercepts	HTTP	Data interception (sniffing)	Data compromised
4	Security applied	HTTPS	Encryption added	Data protected
5	Communication secured	HTTPS	No interception possible	Safe data transmission

💡 Communication secured with HTTPS, preventing interception vulnerability

State Tracker

Variable	Start	After Step 1	After Step 2	After Step 3	After Step 4	Final
Protocol	None	HTTP	HTTP	HTTP	HTTPS	HTTPS
Data Security	None	None	At Risk	Compromised	Encrypted	Secure
Vulnerability	None	None	Interception	Data Leak	Fixed	None

Key Insights - 3 Insights

Why is data vulnerable during transmission in step 2?

Because HTTP sends data unencrypted, attackers can intercept and read it as shown in step 3.

How does switching to HTTPS improve security in step 4?

HTTPS encrypts data, making interception useless since attackers cannot read encrypted data.

Why is the vulnerability marked as 'None' at the end?

Because encryption and security measures prevent data interception and unauthorized access.

Visual Quiz - 3 Questions

Look at the execution table at step 3. What vulnerability occurs?

A Data corruption

B Unauthorized access

C Data interception (sniffing)

D No vulnerability

💡 Hint

Check the 'Vulnerability' column at step 3 in the execution table.

At which step does the protocol change to HTTPS?

A Step 4

B Step 3

C Step 2

D Step 5

💡 Hint

Look at the 'Protocol Used' column in the execution table.

If encryption was not applied at step 4, what would likely happen at step 5?

A Data would remain secure

B Data would be compromised

C Protocol would change to FTP

D Communication would stop

💡 Hint

Refer to the 'Data Security' variable in the variable tracker after step 3 and 4.

Concept Snapshot

Common network protocols like HTTP, FTP, and SMTP enable data exchange.
Unencrypted protocols risk data interception and unauthorized access.
Switching to secure protocols like HTTPS adds encryption.
Encryption protects data from being read if intercepted.
Always use secure protocols to reduce vulnerabilities.

Full Transcript

This visual execution shows how devices communicate using network protocols such as HTTP. Initially, data is sent unencrypted, making it vulnerable to interception by attackers. When an attacker intercepts data, it becomes compromised. Applying security measures like switching to HTTPS encrypts the data, protecting it from interception. The variables tracked include the protocol used, data security status, and vulnerabilities present. Key moments highlight why unencrypted data is risky and how encryption improves security. The quizzes test understanding of vulnerabilities, protocol changes, and the importance of encryption. The quick reference summarizes that secure protocols prevent common network vulnerabilities.

Practice

1. Which protocol is primarily used to securely browse websites by encrypting data between your browser and the server?

easy

A. HTTPS

B. FTP

C. HTTP

D. DNS

Solution

1. Step 1: Understand the purpose of HTTPS

   HTTPS stands for HyperText Transfer Protocol Secure and encrypts data to protect privacy.

2. Step 2: Compare with other protocols

   HTTP is not secure, FTP is for file transfer, and DNS resolves domain names, none encrypt data like HTTPS.

3. Final Answer:

   HTTPS -> Option A

4. Quick Check:

   Secure web browsing = HTTPS [OK]

Hint: Secure web browsing uses HTTPS, not HTTP or FTP [OK]

Common Mistakes:

• Confusing HTTP with HTTPS
• Thinking FTP encrypts web data
• Assuming DNS secures browsing

2. Which of the following is the correct port number for the FTP protocol by default?

easy

A. 80

B. 21

C. 443

D. 53

Solution

1. Step 1: Recall default FTP port

   FTP (File Transfer Protocol) uses port 21 by default for control commands.

2. Step 2: Identify other ports

   Port 80 is for HTTP, 443 for HTTPS, and 53 for DNS, so they are incorrect for FTP.

3. Final Answer:

   21 -> Option B

4. Quick Check:

   FTP default port = 21 [OK]

Hint: FTP control commands use port 21 by default [OK]

Common Mistakes:

• Choosing port 80 (HTTP) for FTP
• Confusing HTTPS port 443 with FTP
• Selecting DNS port 53

3. Consider this simplified code snippet simulating a DNS query response check:

response = {'status': 'NOERROR', 'data': '1.2.3.4'}
if response['status'] == 'NOERROR':
    print('Valid IP:', response['data'])
else:
    print('Error in DNS response')

What will be printed?

medium

A. Valid IP: 1.2.3.4

B. KeyError

C. Valid IP: NOERROR

D. Error in DNS response

Solution

1. Step 1: Check the condition on response status

   The code checks if response['status'] equals 'NOERROR', which it does.

2. Step 2: Determine the printed output

   Since condition is true, it prints 'Valid IP:' followed by response['data'], which is '1.2.3.4'.

3. Final Answer:

   Valid IP: 1.2.3.4 -> Option A

4. Quick Check:

   response['status'] == 'NOERROR' prints IP [OK]

Hint: Check condition first; if true, print IP from data key [OK]

Common Mistakes:

• Confusing status with data value
• Expecting error when none occurs
• Assuming KeyError without missing keys

4. A network administrator notices that FTP traffic is being intercepted and credentials stolen. Which vulnerability is most likely being exploited?

medium

A. SQL Injection

B. DNS Spoofing

C. Man-in-the-Middle Attack

D. Cross-Site Scripting

Solution

1. Step 1: Identify the nature of the attack

   Intercepting FTP traffic and stealing credentials indicates someone is spying on communication.

2. Step 2: Match with known vulnerabilities

   Man-in-the-Middle (MitM) attacks intercept and alter communication between two parties, fitting this scenario.

3. Final Answer:

   Man-in-the-Middle Attack -> Option C

4. Quick Check:

   Intercepted FTP = Man-in-the-Middle [OK]

Hint: Intercepted communication usually means Man-in-the-Middle attack [OK]

Common Mistakes:

• Confusing with DNS Spoofing
• Thinking SQL Injection affects FTP
• Mixing with Cross-Site Scripting

5. You want to secure a company's email communication. Which protocol should you use to encrypt emails during transmission to prevent eavesdropping?

hard

A. FTP

B. Telnet

C. HTTP

D. SMTP with STARTTLS

Solution

1. Step 1: Identify email transmission protocols

   SMTP is the standard protocol for sending emails, but by default it is unencrypted.

2. Step 2: Choose encryption method for SMTP

   STARTTLS upgrades SMTP to use encryption, protecting emails from eavesdropping during transmission.

3. Step 3: Exclude other protocols

   FTP is for file transfer, HTTP is for web browsing, and Telnet is insecure remote access; none encrypt email.

4. Final Answer:

   SMTP with STARTTLS -> Option D

5. Quick Check:

   Email encryption during send = SMTP + STARTTLS [OK]

Hint: Use SMTP with STARTTLS to encrypt email sending [OK]

Common Mistakes:

• Choosing FTP or HTTP for email
• Ignoring encryption in SMTP
• Selecting Telnet which is insecure