Security threats and vulnerabilities

Security threats and vulnerabilities

1. Viruses

   • reproduces itself
   • user spread
   • file systems or network

2. Worms

   • self replicates
     • network

3. Spyware

   • trick to install
   • keyloggers
   • monitor

4. Main in the middle

   • Redirects traffic
   • eavesdropping
   • controls info

5. tailgating

   • follow someone else to gain access to a building

6. Trojan Horse

   • trick to run malicious program
   • pretends something else
   • free reign

7. Dictionary Attack

   • automates password guessing
   • compare encrypted passwords against list of predetermined possible password

8. Brute Force

   • password cracking software
   • fast on short passwords
   • key guessing

9. Rootkit

   • invisible
     • to OS
     • to antivirus
   • modifies core system files
   • hides

10. Distributed Denial of Service (DDoS)

    • Zombies
      • attackers
    • Botnets
      • coordinated attack
    • army of computers to bring down a service

11. Ransomware

    • hostage
    • encrypts data files
    • pay for decryption key

12. Zero day

    • exploit previous unknown vulnerability
    • zero days to fix flaw

13. Social Engineering

    • major threat
    • phone call
    • unattended people

14. Spoofing

    • pretend to be someone you aren't
    • MAC address or IP address
    • fundamental with many DDOS attacks

15. Phishing

    • spam/email
    • social engineering
    • spear phishing
      • targeted

16. Shoulder Surfing

    • access to important info
    • easy