security systems

security systems

1. malware

   • malware infects computers to commit crimes such as identify theft and fraud
   • the computer will crash or reboot, the internet will slow down, files are deleted or become corrupt and records what you type on the keyboard
   • strong security software, enable OS updates and back up files regularly

2. phishing

   • a technique used to acquire information such as passwords, usernames and credit card details by posing as a trustworthy person or entity
   • accesses your account to withdraw money or purchase merchandise, open new bank or credit card accounts in victims name, gaining access to high-value corporate data, financial services can blacklist institutions
   • strong security software, awareness of spotting fake websites and emails, never disclose financial or personal information, disable pop-ups

3. brute force

   • A trial and error method used by programs to decode encrypted data such as passwords
   • Theft of data, access to corporate and private computer systems
   • network lockout policy: locks you out after a certain number of tries, staff training: using effective passwords containing numbers and symbols

4. denial of service

   • Floods a sever with useless traffic, preventing the from responding to client-server requests from users
   • strong security software, packet filters on routers, configuration of the webserver, good network policy: audits, logs and monitoring
   • revenue loss- cost of downtime, productivity comes to a halt, your brand is affected if customers cannot access your site

5. data interception

   • hacker monitors data streams to acquire information
   • discovers usernames or passwords, gains access to systems, theft of data, disclosure of corporate data
   • strong encryption, using virtual networks, network forensics

6. SQL injection

   • used by code injection to attck data-driven applications
   • reveals hidden data, can delete data and new rouge records could be added
   • validation of input fields, use parameterised queries and penertration testing