System threats

System threats

1. Malware

   • Any malicious software that has infected a computer and is affecting it in a bad way.
     • It can slow down computers, steal passwords, steal personal information and delete files.
       • The most recent antivirus software helps a lot, but only if it is updated regularily, the OS also needs to be updated regularily. Most malware is downloaded when a suspicous link is clicked, so that needs to be prevented. And if you do get infected and all files destroyed the only way to get them back is to load a back up, so back ups need to be made.
         • There are several types of malware, like keylogging, which lets the owner fo the malware to see whatever the owner of the computer has typed, like passwords.

2. Denial of service (DDOS)

   • When a computer sends a lot of requests to a website and the website can't respond to them all and thus stops working.
     • It can lead to financial losses, loss of reputation and loss of productivity for companies.
       • It can be prevented with a strong firewall, good networking policy and packet filters on routers.

3. Phishing

   • When someone tries to get someone's personal data by getting them to enter their username and password into a fake website.
     • It can be used to access someone's account and buy expensive items or withdraw money.
       • It can be prevented through staff training, on how to recognise and avoid scams, anti spam software can also get rid of the fraudulent emails.

4. Brute Force Attack

   • When a computer tries to get into a system by constantly putting in different passwords until one works
     • It can lead to data loss and loss of business if in one.
       • It can be prevented with recaptcha and staff training of how to make a good password.

5. Data interception

   • When the attacker attaches a sniffer to a cables to try and find uploaded data
     • It can lead to people having their data stolen, getting access when people shouldn't and discovering usernames and passwords.
       • It can be prevented with strong encryption between computers, use of virtual networks and network forensics.

6. SQL injection

   • When a user enters SQL code into a website instead of what teh website asked for, e.g. a username.
     • It can give the attacker access to everything database, lets the database be changed, things can be added or deleted.
       • It can be prevented with validation of user fields and penetration testing from the owner of the database.

Bilder und Dateien der Mindmap