Network Security | 1.6 V2

Network Security | 1.6 V2

1. Types Of Malware

   • Zombie
   • Key Logger
   • Worms
   • Spyware
   • Trojan Horses
   • Ransomware
   • Backdoors

2. Methods that could have been used to infect a laptop with malware

   • Software that was installed from an untrustworthy source, for example, screensavers, etc
   • Existing anti-malware software is out of date
   • Out of date system/application software
   • Out of date firewall
   • Infected removable devices
   • Exploitation of software vulnerability
   • Scareware
   • A hacked website
   • Rootkits
   • Adware
   • Distributed denial of service
     • Strong Passwords should have: At least eight characters -Include upper case -Include lower case • Include special characters -Include numbers - Does not include a name, company name or user name -Does not contain a complete word -Relates to an acronym

3. Types of Anti-malware

   • Anti-Virus
   • Anti-Spyware
   • Malware Scanner

4. How phishing could take place

   • Staff responds to a fake email
   • Staff responds to a fake link
   • Staff responds to fake website
   • Staff responds to spam
   • Staff responds to popup software
   • Staff responds to social media messages

5. Potential problems to call centre if phishing takes place

   • Acquisition of user names and passwords
   • Acquisition of financial details/credit card details
   • Identity Theft
   • Data Theft
     • • Intrusion detection monitors a network for unauthorised access by an attacker. • Intrusion detection identifies unauthorised access after an attacker has breached a network’s security. • Vulnerability testing scans a network for vulnerabilities. • Vulnerability testing detects vulnerability before an attack occurs.
       • • Controls network traffic/allows data from authorised • Blocks data from unauthorised sources • Protects against attackers • Offers different protection levels • Protects privacy • Provides warnings • Filters advertisements/popups • Filters web content
   • Staff disclose personal/confidential data
   • Financial data theft

6. Social Engineering

   • Pharming
   • Blagging/Pre-Texting
   • Shoulder surfing
   • Baiting scenarious
   • Countermeasures
   • Tailgating
   • Responses to fictitious emails
   • Quad-Pro-Quo
   • Hoax Viruses

7. Brute Force Attack

   • An attack that attempts to decode passwords/encryption keys/encrypted data
   • All possible/numerous combinations are attempted
     • • Penetration testing looks for vulnerabilities. • It attempts to exploit the vulnerabilities that it finds. • The results of penetration testing are presented to network managers to help them to remedy the vulnerabilities • It helps to protect a system from cyber attacks • It identifies and prioritises security risks • It helps to save money/resources • It helps to avoid down time • It helps to protect a company’s reputation
   • A trial and error method
     • Brute Force Attacks: An attack that attempts to decode passwords/encryption keys/encrypted data - All possible/numerous combinations are attempted - A trial and error method - Resource/time consuming method
   • Resource/time consuming method

8. Features of a strong password

   • At least eight characters
   • Include upper case/lower case
   • Include special characters
   • Include numbers
   • Does not include a name, company name or user name
   • Does not contain a complete word
   • Relates to acronym