System threats

System threats

1. Malware

   • Certain software written to infect computers and commit serious crimes including fraud and identity theft.
     • Effects: Computer could crash, internet connection may be slow and files could be deleted.
     • Preventing it: strong security software, enable updates, staff training and back files up regularly.

2. SQL Injection Attack

   • A code injection technique, used to attack data-driven applications. If a database application has not been coded in a secure or stable way, certain code can be entered into text boxes, and will be eventually executed by the server.
     • Effects:

3. Brute Force Attack

   • Trial and error method used by programs to decode encrypted data such as passwords or data encryption standard keys, through exhaustive effort rather than employing intellectual strategies.
     • Effects: theft of data, access to corporate and private computer systems.
     • Preventing it: staff training, network lockout policy and challenge response tests.

4. Data Interception

   • An attacker monitors data streams to or from a target in order to gather sensitive information This attack usually involves monitoring traffic on the network for data such as passwords or configuration information.
     • Preventing it: strong encryption, using virtual networks, staff training and network forensics.
     • Effects: gaining access to systems, theft and disclosure of data, discovering usernames and passwords.

5. Phishing

   • An online fraud technique used by criminals to entice you to disclose personal information such as usernames, passwords and credit card details by being disguised as a trustworthy online communication.
     • Effects: money theft, gaining access to high value data, open new bank accounts in users name
     • Preventing it: strong security software, staff training.

6. Denial of Service Attack

   • Flooding a service with useless traffic causes servers to become overloaded preventing them to respond to legitimate client-server requests from users.
     • Preventing it: strong security software, packet filters on routers, configuration on web server, good network policy.
     • Effects: revenue and productivity losses and reputation damage.

Bilder und Dateien der Mindmap