Ohne Titel

Seite 1

unortharised access/hacking - users attempt to gain access, remote systems without permission, 'black hat' hacking

legally performed, testing security of digital systems 'white hat'. also 'gray hat' is where they can have access but dont take advantage.

social egeneering - used to commit fraud using phone, emails steel id information and commit fraud

phising - form of social engineering cyberattack inbox as spoof mail, problem with payment or bank account, sold for profit to others

pharming - cyber attack, maliciously directed to fake website thinking its real, tell hackers steal private information. tricking people into giving info.

man in middle attack - attack where the communication between two devices are interrupted and tampered with. encryption can protect

internal threats, could be employees downloading illegal software or visit untrustworthy websites, phishing threats, portable storage devices (usb) remove data / put in viruses, disclosure of data overrided security controls (releasing data) stealing or leaking info and sell revenge, social/political reasons. using overriding security controls, can gain accessto something they shpuldnt have access too. malicious action, delete records, steal info, fake invoices paid into own bank, install malware impact of security breach,