Security Threats And Measures

Security Threats And Measures

1. Spyware

   • A piece of software that records the actions of the user (e.g. keys presses) and sends this data to a third party for analysis.
   • One way to prevent this would be to use anti-malware software which scans the device (e.g. computer) for any malicious software periodically. If it finds malicious software it quarantines it, keeping it away from other files.

2. Passive attack

   • This is where a hacker monitors a network in order to gain sensitive and personal information.
   • One way to prevent this is to encrypt your files so that when they are transferred over the network they are secure and can only be accessed when they reach their destination/ the person you were intending to see them.

3. Malware

   • Computer programs designed to infiltrate and damage computers from the inside without users consent.
   • One way of preventing this is by using anti-malware software which periodically scans for any malicious software and if it finds any it is quarantined to prevent it from affecting any other files.

4. Phishing

   • An email link that when clicked directs the user to a fake website that collects the person's personal data.
   • One way of preventing it is by using a firewall as it sends and receives data packets checking for malicious files as they come through.

5. Hacker

   • One way of preventing this is by using strong passwords that use upper and lowercase letters, symbols and numbers. Another way is by using a firewall that scans the data it receives to check for malicious data.
   • A person attempting to gain unauthorized access to the network, computers and data/files and then they proceed to delete and editing data/files.

6. SQL Injection

   • SQL injection is a code injection technique and it used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution.
   • Some of the precautions taken in awareness of SQL Injection include: validation on user input to check what has been input into a box does not contain SQL statements or disallowed characters and penetration testing where someone tests for vulnerabilities/weaknesses and reports back.