System Security

System Security

1. Social Engineering

   • Phishing
     • Come from email links
       • Pretending to be someone they aren't
   • Attacks on workers
     • People are weakest part of a company

2. Malware

   • Worms
     • It spreads copies of itself through a system
   • Trojan horse
     • Code pretending to be friendly but is actually a virus
   • Spyware
     • Records people's actions. e.g. keyboard types
   • Randsomware
     • Captures information and holds it randsom

3. Brute force

   • Trial and error login

4. Denial of Service Attack

   • Crashes network with many requests
   • Mitigate affect with back up and mirror code
   • May crash site or just run slowly

5. Data Interception + Theft

   • Intercepts packets and information
   • Use encryption to stop this
     • It can only be decrypted with a key

6. SQL Injection

   • Uses simple code to cause outputs of information
   • Use validation to stop this

7. Poor network policy

   • Passwords need to be changed often
   • Don't press suspicious links

8. Penetration testing

   • Finding different weaknesses in a code