1.6

1.6

1. preventing vulnerabilities

   • User Access Rights limits what each network user can access.
   • Passwords need to be strong to maintain security.
   • A network policy sets out the rules and procedures to help protect the network.
   • Acceptable Use policy sets out what user can and cannot do.
   • A good backup policy help keep data safe.
   • Disaster recovery policy sets out the procedures to recover from a complete network failure.
   • Network forensics monitors the network in real time. System logs are also examined daily.
   • Anti-malware and Anti-virus applications are installed to detect issues.
   • A firewall controls the data packets that can flow in and out of the network.
   • Penetration testing is a way of trying to find network weaknesses.
   • Encryption make confidential data unreadable unless the decryption key is used.

2. network threats

   • There are many forms of threat to compromise network security
   • Malware is a general term for any hostile or intrusive software
   • Malware includes virus, spyware, phishing, pharming, ransomware
   • Social engineering takes advantage of the fact people are the weakest link
   • Brute force and dictionary attack try and guess passwords
   • Denial of Service (DoS) flood a server with requests to crash it
   • Man-in-the-middle is a form of data interception
   • SQL injection tries to attack a database to gain access to confidential information
   • A good network policy needs to be in place to reduce security risk

3. malware

   • virus: Infects files, copying itself whenever the file is run
   • worm: Massively copies itself, using up system resources
   • Trojan:Disguises itself as legitimate software
   • Spyware: Spies on the user
   • Adware: Forces a browser to display unwanted advertisements.
   • Pharming: Redirects browsers to fake versions of websites
   • Click fraud: Secretly uses computer resources to click on advertisements
   • Ransomware: Encrypts critical files and data and demands a payment to unlock them
   • Rootkit: Alters permissions and access levels on the user’s device
   • Scareware: Prompts the user with a fake problem and presents a solution that involves downloading further malware

4. network security

   • Network security is needed in order to keep data and software safe.
   • Cyber security is a set of measures taken to protect a computer from harm to its data and software. It also includes the protection of computer networks from unauthorised access.
   • A 'cyber attack' is an attempt to gain unauthorised access or control of a computer and the network to which it is connected.
   • Reasons for security: Data theft, Data manipulation, Data Loss.
   • Reasons for security: Data theft, Data manipulation, Data Loss.
   • The ICO or Information Commissioner's Office is set up to ensure organsiations comply with the Data Protection Act.

Bilder und Dateien der Mindmap