System Threats

System Threats

1. Brute Force Attack

   • Definition: A trial and error method which is used by programs to encode data. For example passwords or Data Encryption Standard.
     • Effects: Your data could be stolen and the attacker could gain access to coporate and private computer systems.
       • Prevention: using a Network Lockout Policy (locks the attacker out after a number of times) , using effective passwords that contain symbols and numbers (Staff Training) and Challenge response texts for example reCAPCHA (the user has to look at a picture and answer a question.

2. Malware

   • Definition: Software which is designed to commit crimes such as fraud and identity theft.
     • Effects: With no logical explanation your computer will slow down , reboot spontaneously or crash. Your files may be encrypted, deleted or become corrupt. Also if a worm infects your computer your internet will slow down.
       • Prevention: Get strong security software, make sure you enable OS updates on your computer, back up your files regularly and open attachments with caution.

3. Phishing

   • Definition: It is an online fraud technique used to trick people into giving them your personal information such as credit card details and passwords by disguising themselves as trustworthy entity.
     • Effects: Criminals can access your account to withdraw money or make purchases. They can also open a new bank account in your name and use the new account to sign checks and make purchases.
       • Prevention: Disable pop-ups, never give websites you personal information or financial information and install strong security software.

4. Data interception and theft

   • Definition: When an attacker monitors data streams which are from or to a target. This is so they can gather sensitive information (like passwords). With a basic sniffer program they can easily read plain text traffic (like passwords).
     • Effects: The attacker can find your passwords and usernames,they can gain access with this information and therefore can steal data and publish or make new data using this account.
       • Prevention: have strong encryption, use virtual networks and network forensics.

5. SQL Injection

   • Definition: A computer attack which harmful code is embedded in a poorly designed application. This code then reaches the back-end database and dictates actions which never should have been executed.
     • Effects: Contents of the database can output, which can reveal data that should have never been revealed. Also data can be deleted and new rogue data can be created.
       • Prevention: Use database permissions, use data validation input fields and use parameterised inquiries.

6. Denial of service attack

   • Definition: When an attacker overloads a machine or target with unnecessary requests with the intention to overload system and prevent some or all legitimate requests from being fulfilled.