system threats

system threats

1. phishing

   • online fraud technique used by criminals to make you disclose personal information like usernames, passwords, and credit card details by disguising as a trustworthy company. There are many tactics they can use like emails and phones calls.
     • effects
       • accessing a victims account and withdraw money or purchase merchandise or services.
       • open bank accounts in victims name and cash illegitimate checks or purchases
       • gaining access to high-value corpotation data
       • financial services can blacklist institutions, resulting in reputational damage
     • preventing
       • strong security software
       • awareness of spotting fake websites and emails
       • never disclose personal or financial information
       • disable pop-ups

2. malware

   • software written to infect computers and commit crimes such as frad and identity theft. Malware can sneak malicious Trojan horse programs onto unsecured PCs. You can download them in games ect..
   • effects
     • computer can crash, slow down or reboot
     • internet possibly slower
     • files delete
     • often the worst symptom sare the ones you cant see
   • preventing malware
     • strong security software
     • enable OS updates
     • caution opening attachents
     • back up files regularly

3. brute force attack

   • its a trial and error method, they decode incripted data such as passwords .
   • effects
     • theft of data
     • access to private or corprative computer systems
   • preventing
     • use effective passwords
     • challenge response test -user has to look at a picture and answer a question

4. denial of service attack

   • filling the server with useless rubbish which makes it hard to reply to legitimate things
   • effects
     • downtime
     • productivity loss
     • reputation damage-if a custimer cant access the website they may just give up
   • preventing
     • strong security software
     • packet filters on routers
     • configuration of the webserver
     • good network policy

5. SQL injection

   • when things arent secured propely
   • effects
     • accessing private data
     • data in the database can be amended or deleted
     • new rouge records can be added
   • preventing
     • validation of input fields
     • using parameterised queries
     • using database permission
     • penertration testing

6. data interception and theft

   • an attacker targets data streams to gather sensitive information. this attack usually involves sniffing network trafficing
   • effects
     • discovering username and password credidentials
     • gaining access to systems
     • disclosure of corprative data
     • data theft
   • preventing
     • networkforensics
     • use of passwords, locking and potable storage devices
     • using virtual networks
     • strong encryption