System Threats

System Threats

1. Malware

   • Malware is any piece of software created to damage a computer.
   • Preventing malware - Strong security software (firewall, spam filter, anti-virus, anti-spyware, anti-spam) - Enable OS updates, because they contain anti-virus software -Staff training: caution opening attachments - Back up files regularly - Update your anti-virus software as soon as it's available
   • Effects of malware: The computer may crash, reboot spontaneously or slow down without any logical explanation. When a worm infects a computer, the internet connection may become slow as the worm searches online for other computers to infect. Files may be deleted, become corrupt or encrypted. Malware might be designed to record the keys that you press on your keyboard, creating a text log that your computer sends to a hacker periodically. creating a text log that your computer sends to a hacker periodically.

2. Phishing

   • Phishing is an online fraud technique used by criminals to entice you to disclose personal information such as usernames, passwords and credit card details by disguising as a trustworthy entity in an electronic communication. A common phishing practice involves spamming recipients with a fake message under the name of a trusted institution. The purpose of this fake message is to trick you into providing personal information.
   • • Accessing a victim’s account and withdraw money or purchase merchandise or services. • Open new bank or credit-card accounts in a victim’s names, and use the new account to cash illegitimate checks or purchase merchandise. • Gaining access high-value corporate data.
   • • Strong security software (firewall, spam filter, anti-virus, anti-spam). • Staff training: awareness of spotting fake websites & emails. • Staff training: never disclose personal or financial information. • Staff training: disable pop-ups.

3. Brute Force Attacks

   • A brute force attack is a trial and error method used by programs to decode encrypted data such as passwords, through exhaustive effort rather than employing intellectual strategies.
   • The effects of brute force include: • Theft of data. • Access to corporate and private computer systems.
   • How to prevent brute force attacks: • Network lockout policy: locks out after a number of tries. • Staff training: using effective passwords that contain symbols and numbers. • Challenge response tests e.g. reCAPTCHA – user has to look at a picture and answer a question

4. DDoS attacks

   • Denial of service attack Flooding a server with useless traffic causes servers to become overloaded preventing them responding to legitimate client-server requests from users. Many DoS attacks, such as the Ping of Death and Teardrop attacks, exploit limitations in the TCP/IP protocols. DDoS is a type of attack where multiple compromised systems, which are often infected with a Trojan, are used to target a single system causing a Denial of Service attack.

5. SQL Injections

   • SQL injection is a code injection technique, used to attack data-driven applications. If a database application has not been coded in a secure way, code can be entered into text boxes, and will be executed by the server.
   • Effects of SQL injection • Contents of the database can be output, revealing data that otherwise would be hidden. • Data in the database can be amended and deleted. • New rogue records can be added.
   • Preventing SQL injection - Validation of input fields. - Using parameterised queries. - Using database permissions. - Penetration testing.