Threats

Threats

1. Phishing

   • When criminals send emails or texts to someone claiming to be a well-known business in order to gain personal data.

2. Types of Attacks

   • Active attack
     • The hacker attempts to change data or introduce malware to the computer system.
       • Firewall, Passwords and Anti-malware
   • Passive Attack
     • Someone monitors data traffic using network monitoring software/hardware to intercept sensitive data.
       • Encryption
   • DDos
     • Where a hacker floods a network with useless data packets (traffic) to make it extremely slow or inaccessible.
       • Validation
   • Insider attack
     • Where someone within the organisation exploits their network access to steal information.
       • User access levels
   • Brute force attack
     • Where the hacker uses software to crack security passwords through trial and error.
       • Validation
   • SQL injection
     • A piece of code which can be typed into an input box on a website to try and attack a database.
       • Pen-testing

3. Malware

   • Scareware
     • A type of malware that creates false messages to trick the user into following malicious links.
       • Anti-Malware system
   • Ransomware
     • A type of malware that uses encryption to lock a user out of their files.
       • Anti-Malware system
   • Worms
     • A type of malware which replicates itself.
       • Anti-Malware system
   • Trojan
     • A type of malware which is disguised as legitimate software.
       • Anti-Malware system
   • Viruses
     • A type of malware which spreads by attaching itself to files.
       • Anti-Malware system
   • Spyware
     • A type of malware which secretly monitors and records user actions.
       • Anti-Malware system

4. Social engineering

   • A way of gaining illegal access to data or networks by influencing people.