System Security

System Security

1. Threats posed to networks

   • Malware
   • Phishing
   • Social Engineering
   • Brute Force
   • DDOS
   • Data interception & theft
   • SQL Injection
     • a computer attack in which malicious code is embedded in a poorly-designed application and then passed to the backend database. The malicious data then produces database query results or actions that should never have been executed.
   • Poor Network Policy

2. Identifying and preventing vulnerabilities

   • Penetration testing
   • Network forensics
     • Network forensics is a sub-branch of digital forensics relating to the monitoring and analysis of computer network traffic for the purposes of information gathering, legal evidence, or intrusion detection. Unlike other areas of digital forensics, network investigations deal with volatile and dynamic information.
   • Network policies
     • Security policy is a definition of what it means to be secure for a system, organization or other entity. For an organization, it addresses the constraints on behavior of its members as well as constraints imposed on adversaries by mechanisms such as doors, locks, keys and walls.
   • Anti-malware software
   • Firewalls
   • User access levels
   • Passwords
   • Encryption