System Security

System Security

1. Forms of Attack

   • Malware
   • Phishing
     • Is the attempt to obtain sensitive information often for malicious reasons, by disguising as a trustworthy entity in an electronic communication.
   • Social Systems
   • Brutal Force Attacks
     • Brute force is a trial and error method used by application programs to decode encrypted data such as passwords or Data Encryption Standard (DES) keys, through exhaustive effort rather than employing intellectual strategies.
   • DDOS
     • DDoS is a type of DOS attack where multiple compromised systems, which are often infected with a Trojan, are used to target a single system causing a Denial of Service (DoS) attack.
   • Data Interception and Theft
   • SQL Injection
     • SQL injection is a code injection technique, used to attack data-driven applications, in which nefarious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker).
   • Poor Network Policy
     • A network security policy is a generic document that outlines rules for computer network access, determines how policies are enforced and lays out some of the basic architecture of the company security/ network security environment.

2. Identifying and Preventing Vulnerabilities

   • Penetration Testing
     • Penetration testing is the practice of testing a computer system, network or Web application to find vulnerabilities that an attacker could exploit.
   • Network Forensics
     • Network forensics is a sub-branch of digital forensics relating to the monitoring and analysis of computer network traffic for the purposes of information gathering, legal evidence, or intrusion detection.
   • Network Policies
     • A network security policy, or NSP, is a generic document that outlines rules for computer network access, determines how policies are enforced and lays out some of the basic architecture of the company security/ network security environmen
   • Anti-Malware Software
     • Antimalware (anti-malware) is a type of software program designed to prevent, detect and remediate malicious programming on individual computing devices and IT systems.
   • Firewalls
   • User Access Levels
   • Passwords
   • Encryption