Security threats

Security threats

1. Malware

   • Malware, a term used for malicious software is a software written to damage or disable computers and commit crimes such as fraud or theft.
   • Effects of malware include-spyware, viruses, adware, and trojan horses can infect can effect a computer when the user installs an infected program. Because this program carries the malware, this type of program can occur through something downloaded from the internet or loaded on to the computer from a removable source
   • To prevent malware you could, have strong security software (firewall,spam filter, anti virus etc),enable os updates, training(caution opening attachments), or you could back up your files regularly..

2. Phishing

   • Phishing is an online fraud of sending emails purporting to be from reputable companies in order to induce individuals to reveal personal information, such as passwords and credit card details.
   • The harmful effects of phishing include theft of identity and users confidential details. This could result in financial losses for users and even prevent them from accessing their own accounts.
   • There are many ways of preventing phishing, for example strong security software (anti spam/virus), training of self awareness to spot fake websites etc

3. Brute force attack

   • This form of attack is a trial and error method used by programs to decode encrypted data, for example passwords or data encryption standard keys, through exhaustive effort rather than employing intellectual strategies.
   • Effects of brute force attack include theft of data or access to corporate and private computer systems. It doesn't seem like many but if the hacker gets into your computer system, it can lead to many more effects such as theft of identity.
   • There are many ways of presenting brute force attack, for example a network lockout policy so that after a number a times of trying to enter the device and failing it means they can not try again.

4. Data interception and theft

   • This is were an attacker monitors data stream to or from a target, in order to gather sensitive information. This type of attack usually involves sniffing network traffic. Sniffing or eavesdropping is the act of monitoring traffic on the network for data such as plaintext passwords.
   • There are many effects of this attack, for example theft of data such as passwords and private information or the attacker could gain access to systems to easily steal information or worse.
   • To prevent this attack, you could get staff training to make sure you understand what to do if this happens or use network forensics to make sure it doesn't happen.

5. Denial of service attack

   • This is were the attacker floods the server with useful traffic which causes the sever to overflow preventing the sever from responding to real server requests.
   • One of many effects of denial of service attack includes, productivity loss. This is when critical network systems are shut down which means your workforce's productivity comes to halt. Another major effect is reputation damage; this is were your brand suffers if customers can't access your site or become casualties of data breach.
   • Preventing this attack includes strong security software (such as firewall), good network policy; monitoring, logs, audits. Also you could get packet filters on routers to help reduce the risk.

6. Injection

   • SQL injection is a code injection technique, used to attack data driven applications. If a database application has not been coded in a secure way, code can be entered into text boxes, and will be executed by the server.
   • This type of threat can cause contents of the database can be output, revealing data that otherwise would be hidden. Also data in the database can be amended and deleted. This database could contain important information or private.
   • Preventing this threat you can; use database permissions , validation of input fields, use parameterised queries or penertration testing.