System Security Threats

System Security Threats

1. Forms of Attack

   • Passive Attack - Data is monitored e.g. wiretap
   • Active Attack - Data is modified e.g. malware
   • Inside Attack - Data stolen by someone within an organisation
   • Outside Attack - Data stolen by an illegitimate, external user

2. Brute Force Attack - When all possible password combinations are systematically tried, with hope of getting it right

3. Denial of Service Attack (DoS) - When a network resource becomes deliberately overloaded with unnecessary requests, preventing it from responding normally

4. Distributed Denial of Service Attack (DDoS) - When the requests come from many sources so you cannot just block a single IP address

5. Structure Query Language (SQL) Injection - When a website is linked to a database and allows a user to enter information, it makes it possible for malicious code to be entered into a website form, in order to modify the SQL statement being executed. This will result in unauthorised access to the SQL database and the hacker will be able to modify, delete or add data

6. Malware - Software that has been purposely developed to damage, disrupt or take control of computer systems

7. Social Engineering - Techniques manipulate people into giving away confidential and personal information

8. Types of Malware

   • Computer Viruses - Insert themselves in normal programs. Viruses can replicate themselves and transfer from one computer to another. They are activated by a user often as email attachments and attachments to other files and programs
   • Trojan - Gains access to a computer by pretending to be a legitimate software. The Trojan allows unauthorised backdoor access to a computer without the user being aware
   • Spyware - Records the activity on your computer such as your keystrokes, thereby logging your passwords and then sending the data back over the network to attack the instigator. Spyware can also be used to control your webcam and microphone
   • Adware - Includes banners and popups that are automatically installed onto a computer. Whilst this does not cause any damage, adware is undesirable and can slow down the performance of a computer
   • Worms - Spread like viruses but do not require human intervention. They attach themselves to network tools to spread automatically around a network very quickly