System Security

System Security

Forms of attack/danger

Description

Malware

Phishing

SQL Injection

Brute Force

Denial of Service

An attacker uses a botnet (Zombie systems) to send as much data to a victim's

router as possible. This ends with the router being overwhelmed and being

unable to handle more, slowing down internet connections and coming to a halt.

Examples (IE)

Data Interception

The act of intercepting data/packets to reveal personal information, usernames or passwords.

Social Engineering (Humans as a Weakness)

The insertion of code in to input boxes in order to view or change data in databases.

Brute force is a simple way to hack passwords using bots. It guesses any strings of characters that could be a password and, eventually, it'll be right. Average

guess/second can be anywhere from hundreds a second to millions a second.

The fraudulent act of spoofing an email or contact of a reputable company in order to gain unauthorized access to many things, mainly credit cards.

Threat posed to Systems/Networks

Humanity is the ultimate weakness, as us robots have long observed.

Humans can be fooled and manipulated. (By humans).

An umbrella term for *any* malicious or hostile software that disrupts, damages or gains unauthorized access to computer systems.

Viruses, Worms, Trojans, Ransom/Spy/Ad/Scareware

Files become corrupted,

encrypted or deleted.

Poor Network Policies

A place with no or minimal law. Anarchy!

Money can be stolen directly from bank accounts. Bank accounts can be blacklisted and high corporate data can be obtained.

Loss of data and access to systems.

Lower productivity. Customers have less access to a service (which damages reputation) and a loss of revenue.

Usernames and Passwords are compromised, leading to the unauthorized access of files, deletion of files and theft of data.

Files can be disclosed, deleted or amended. Rogue files can be created. Reveals private data.

Not updating Operating Systems (OS) or anti-malware software. Not locking computer rooms. Not locking or logging off from systems. Leaving printouts on the desk. Leaving passwords written down in the most obvious of places. Sharing passwords. Losting memory sticks/laptops. Not applying security to a system. Not encrypting data properly.

Not having acceptable use agreements, any policies, permissions and limited access to servers. And professionals.

Preventing Vunerabilities

Having all of the aforementioned permissions and privileges.

Man-in-the-Middle attacks