Karteikarten
Chapter 5 - Systems Security
Karten in diesem Stapel (29)
- 15 main forms of attack a network can be subjected toActive
Passive
Distribution
Insider
Close-in - 2Active attackWhen a network is attacked with a planned attack, such as trying to hack a network.
Prevention - Use of a firewall - 3Passive attackWhen data that is being transmitted around a network is monitored.
Prevention - Use of data encryption - 4Distribution attackWhen a person knows of a 'back-door' access into a network from manufacture.
Prevention - Use trusted software from reputable manufactures. - 5Insider attackWhen someone that works for an organisation abuses their access to a network in order to steal personal or sensitive information.
Prevention - Layers of security in place for confidential information. - 6Close-in attackWhen an attacker is very close to the device or system they are trying to attack.
Prevention - Difficult to prevent; any sensitive systems should be away from access when not being used, - 7MalwareSoftware that is designed to disrupt or harm a user's computer
- 8Malware threatsVirus
Trojan horse
Worm
Spyware
Ransomware - 9VirusA computer program that infiltrates a computer system and replicates itself. - intended to cause damage to a computer system by corrupting data or using up all the available memory, causing it to crash.
- 10Trojan horseA type of malware disguised as a harmless file or download. When the seemingly harmless file is downloaded, the malware is downloaded with it.
- 11WormA computer program that finds holes in a computer network and uses these to replicate itself - in doing this it will clog up bandwidth and slow a network down.
- 12SpywareComputer programs that gather data about people without their knowledge
- 13RansomwarePrograms that attempt to blackmail a user into paying money.
- 14PhishingSending emails pretending to be a reputable company to try to gain people's personal details.
- 15VishingVoice solicitation - exploiting human vulnerabilities.
- 16Social engineeringTricking people into breaking security procedures to break into a network.
- 17Threats phishing and social engineering can be subjected toThreats phishing and social engineering can be subjected to
- 18Brute-force attacksWhen a person tries to access a network by cracking the login details.
- 19Denial-of-service attack (DoS)Designed to to flood a network with useless network traffic - makes it run slowly or grind to a halt altogether.
- 20Data interception and theftWhen data packets are monitored that are travelling around a network - they are monitored to look for packets that contain personal or sensitive information.
- 21SQL injectionShort for Structured Query Language.
When a hacker inputs SQL commands into a login form in order to gain access to a database. - 22Poor network policyA network may become under threat if an organisation has a poor network policy.
- 23Penetration testing/PEN testingAn authorised attack on a computer system to test the security of the system.
People who carry out penetration testing are often referred to as ethical hackers, or white hat-hackers. - 24White-hat hackersEmployed to combat black-hat hackers (Perpetrators who attack networks).
- 25Grey hat hackersHacking to find a vulnerability in a system without permission.
- 26Anti-malware softwareDesigned to find any malware that has been downloaded onto a user's system.
- 27FirewallA security measure that prevents unauthorised traffic coming into or leaving a network, by using a set of rules.
- 28A company wants to make sure that its system is very secure. It hires an individual to carry out penetration testing to improve its network security. Explain what is meant by penetration testing. [2]Penetration testing is an authorised attack on a computer system to test the security of the system.
People who carry out penetration testing are often referred to as ethical hackers, or white-hat hackers. - 29James received an email advising him his social media account had been hacked. The email asks him to click on a link and confirm his details to resolve the attack on his account. State the name given to this type of email. [1]Phishing email
Informationen
- Beschreibung
- Computer Science Karteikarten am Chapter 5 - Systems Security, erstellt von Caitlin Mulhall am 13/08/2019.
- Erstellt von
- Caitlin Mulhall
- Aufrufe
- 2
- Bewertung