1.6 System Security

1.6 System Security

1. Threats Posed to Networks

   • Malware
     • Viruses
       • Attach themselves to files - attmpt to spread - often as email attachment. Damage data - though only if open attached file.
     • Worms
       • Similar to Viruses, do not need to attach to file. Replicate themselves & dmg system w/o needing a file to be opened.
     • Trojans
       • Legitimate programs made w/ intention of hiding malicious code. Largely legitimate, not classed as malware mostly.
     • Adware
       • Downloads unwanted internet advertisements; observes online behaviour so more specific adverts targetted.
     • Spyware
       • Covertly obtains your sensitive data - such as credit card nos and PWs.
   • Social Engineering
     • Phishing
       • Uses emails to lure people to fake but convincing web pages. Believe logging into actual thing - send info to hackers.
     • Shoulder Surfing
       • Simply watching over somebody's shoulder as they type in their information
     • Pretexting
       • Where a situation is fabricated in order to gain access to a system. A person could pretend to be IT support and convince someone to give them their password.
   • Other Attacks
     • Brute Force Attacks
       • Using a program to crack a PW by trying every possible combination of characters.
     • Denial of Service Attacks
       • Requesting access to a website quickly and repeatedly. Server unable to keep up, gets 'overloaded'.
     • Data Interception
       • When data is transmitted between two devices - it can be effectively 'listened to' by other devices. Confidential information dangerous, e.g. PWs, CC numbers.
     • SQL injection
       • SQL language to control databases. SQL injection involves 'smuggling' a command into a database to either get or delete information from it.

2. Identifying and Preventing Vulnerabilities

   • Software
     • Firewalls
       • Can be either hardware or software. Can be told to block certain traffic or to only allow certain traffic.
     • Anti-malware software
       • Also called Antivirus software, detects malware. Malware then deleted, quarantined. Must be regularly updated.
     • Network Policies
       • A list of rules and procedures. Minimise the risk of a cyber attack if followed exactly. Might specify how access is controlled, etc.
     • User Access Levels
       • Users have certain access rights when logged in. Normal users might onyl be able to access their own data, admin can see everyone's, other can see but not edit etc.
     • Encryption
       • When the contents of a file or document are scrambled, rendering them essentially useless if intercepted unelss someone has the exact key to decrypt.
   • Other
     • Network Forensics
       • A collection of tools to find out information about a cyber attack so that the vulnerability may be secured and track down whoever is responsible for carrying out the attack.
     • Paswords
       • Important to set strong passwords, often incorporating symbols and numbers, to reduce the likelihood of unauthorised access.
     • Physical security
       • Important to keep access to servers or other pieces of technology limited - someone could steal them and access important information or cause damage.
     • Pen Testing
       • When the owner or contractor attempts to break into a system in order to find vulnerabilities before a hacker may exploit them.