System Threats

System Threats

1. Malware

   • Malware—software written to infect computers and commit crimes such as fraud and identity theft.
     • Pie chart of how malware attacks
     • Examples of malware attacks
       • Viruses
         • A computer virus is a type of malicious software program that, when executed, replicates by reproducing itself typically by infecting other computer programs by modifying them.
       • Trojan Horse
         • Trojan horse, or Trojan, is any malicious computer program which is used to hack into a computer by misleading users of its true intent.
       • Spyware
         • Spyware is software that aims to gather information about a person or organization without their knowledge, that may send such information to another entity without the consumer's consent, or that asserts control over a device without the consumer's knowledge.
       • Ransomware
         • Ransomware is a type of malicious software that carries out the cryptoviral extortion attack from cryptovirology that blocks access to data until a ransom is paid and displays a message requesting payment to unlock it.
   • effects
     • • Files may be deleted, become corrupt or encrypted. However, the worst symptoms of malware are often the ones that you do not see. Malware might be designed to record the keys that you press on your keyboard, for example, creating a text log that your computer sends to a hacker periodically. The hacker then scans the text log, looking for passwords that he can use to access your email or bank accounts.
     • • The computer may crash, reboot spontaneously or slow down without any logical explanation.
     • • When a worm infects a computer, the internet connection may become slow as the worm searches online for other computers to infect.
   • prevention
     • - Update security software
     • - Strong security software (firewall, spam filter, anti-virus, anti-spyware, anti-spam)
     • - Enable OS updates
     • - Staff training: caution opening attachments
     • - Back up files regularly

2. Phishing

   • Phishing is an online fraud technique used by criminals to entice you to disclose personal information such as usernames, passwords and credit card details by disguising as a trustworthy entity in an electronic communication.
   • prevention
     • • Staff training: disable pop-ups.
     • • Strong security software (firewall, spam filter, anti-virus, anti-spam).
     • • Staff training: awareness of spotting fake websites & emails.
     • • Staff training: awareness of spotting fake websites & emails.
     • • Staff training: never disclose personal or financial information.
   • effects
     • • Financial services can blacklist institutions, resulting in reputational damage.
     • • Accessing a victim’s account and withdraw money or purchase merchandise or services.
     • • Open new bank or credit-card accounts in a victim’s names, and use the new account to cash illegitimate checks or purchase merchandise.
     • • Gaining access high-value corporate data.

3. Brute Force Attacks

   • A brute force attack is a trial and error method used by programs to decode encrypted data such as passwords or Data Encryption Standard (DES) keys, through exhaustive effort rather than employing intellectual strategies.
   • prevention
     • • Challenge response tests e.g. reCAPTCHA – user has to look at a picture and answer a question.
     • • Network lockout policy: locks out after a number of tries.
     • • Staff training: using effective passwords that contain symbols and numbers.
   • effects
     • • Theft of data.
     • • Access to corporate and private computer systems.

4. Ddos Attacks

   • effects
     • • Reputation Damage: your brand suffers if customers can’t access your site or become casualties of a data breach.
     • • Revenue losses: downtime affects profits. Based on industry surveys, the average cost of downtime is over £4000/minute
     • • Productivity Loss: when critical network systems are shut down, your workforce’s productivity comes to a halt.
   • prevention
     • • Good network policy: audits, logs, monitoring.
     • • Strong security software (firewall).
     • • Packet filters on routers.
     • • Configuration of the webserver.
   • Flooding a server with useless traffic causes servers to become overloaded preventing them responding to legitimate client-server requests from users.

5. Data Interception and Theft

   • effects
     • • Theft of data.
     • • Discovering username and password credentials.
     • • Gaining access to systems.
     • • Disclosure of corporate data.
   • An attacker monitors data streams to or from a target, in order to gather sensitive information.
   • prevention
     • • Network forensics.
     • • Strong encryption.
     • • Using virtual networks.
     • • Staff training: use of passwords, locking and portable storage devices.

6. SQL Injection

   • effects
     • • New rogue records can be added.
     • • Contents of the database can be output, revealing data that otherwise would be hidden.
     • • Data in the database can be amended and deleted.
   • SQL injection is a code injection technique, used to attack data-driven applications.
   • prevntion
     • - Validation of input fields. - Using parameterised queries. - Using database permissions. - Penetration testing.

Bilder und Dateien der Mindmap