Unit 1.6 System Security

Unit 1.6 System Security

1. Forms of Attack

   • Malware
     • Software designed especially to infect or damage computers as well as gain unauthorised access
       • Threats posed
         • Files can be deleted or corrupted
           • Internet connections become slow
           • Computers can crash, reboot and slow down
           • Keyboard inputs are logged and sent to hackers periodically
         • Prevention
           • Use strong security software
             • Enable updates
             • Backup regularly
             • Be cautious of email attachments
     • Trojan Horse Files
       • Infects unprotected computers while disguised as a reliable file
         • Can be passed on using peer to peer file sharing
     • Worms
       • Replicates itself to spread to other computers
         • Doesn't need to attach to a program or file but a virus does
   • Phishing
     • Attacker disguised as a reliable entity to steal personal information such as card details through emails
       • Threats posed
         • Money can be withdrawn and stolen
           • Fake accounts can be opened
             • Unauthorised access to high value corporate data
               • Prevention
                 • Be cautious of emails and don't give out personal information
                   • Block pop up ads
                     • Strong security software
             • Damage reputation
   • Brute Force
     • An automated software using consecutive guesses in trial and error to crack passwords and keys
       • Threats posed
         • Attacker can steal data
           • Or gain access to corporate data
         • Prevention
           • Lock account after 3 password attempts
             • Create progressive delays so it takes time before retry
               • Use effective passwords
               • Challenge response eg. reCAPTCHA
   • Denial of Service
     • Floods server with useless traffic so it can't reply to actual client server requests
       • Exploits limitations in the TCP IP protocol and creates a target
         • Threats posed
           • Customers lose access to service
             • Company loses revenue
               • Damage of reputation
           • Prevention
             • Strong firewall
               • Use packet filters
                 • Configure web service
   • Data Interception and Theft
     • Constantly monitors data streams to and from a target to try and collect sensitive computer based information.
       • Threats posed
         • Usernames and passwords are compromised
           • Unauthorised access
         • Prevention
           • Encrypt and log off
             • Use network forensics to see where vulnerabilities are
     • Packet sniffer program
       • Easily reads plain text traffic and collects information that isn't encrypted
   • SQL Injection
     • Attacks data driven applications if they aren't secured and when text is entered into boxes it's executed by the server
       • Used to view or change data in a database by inserting additional code to create a different search string
         • Threats posed
           • Reveals private information
             • Data in a database can be amended or deleted
               • Prevention
                 • Check coding regularly
                   • Use database permissions only for administers
                   • Use penetration testing to hack and see where the vulnerabilities are

2. People as a threat/weak point

   • Not installing updates
     • Not keeping anti malware up to date
       • Not applying security settings
         • Not logging off

3. How to improve Network Policy

   • Create a good network policy
     • Acceptable user agreements
       • Raise awareness