network security threats

network security threats

1. forms of attack

   • Passive Attack – data is monitored e.g. wiretap
   • Active Attack - data is modified e.g. malware
   • Inside Attack– by someone within the organisation
   • Outside Attack – by an illegitimate, external user

2. system security

   • to protect computers and networks from cyberattacks
   • to prevent unauthorised access to computers
   • to protect computers against damage caused by malicious software
   • to prevent data from being stolen
   • to protect against the disruption of services running on the computer
   • System security describes the controls and safeguards that an organization takes to ensure its networks and resources are safe from downtime, interference or malicious intrusion. If data security is meant to protect the information in the books in the library, then system security is what protects the library itself.

3. phising

   • Phishing Normally an email or text messaging scam where victims are conned into believing that they are being contacted by an authentic organisation (e.g. by their bank) and can give sensitive personal details (such as bank account passwords).
   • some examples
     • Clicking an attachment Enabling macros in Word document
     • Updating a password Responding to a social media connection request Using a new wi-fi hot spot.

4. brute force attack

   • how to provent it
     • Using strong passwords, Locking accounts after a certain number of login attempts, Using 2 step verification (e.g. a code sent to mobile phone to confirm identity)
   • With this type of attack, using strong-passwords and 2 step verification

5. malware

   • prevent
     • Running anti-malware software regularly NOT downloading software from unknown sources NOT clicking on unknown links Scanning downloaded files before opening them NOT using removable media (e.g. a USB drive) as they may contain malware Using automatic software updates: up-to-date software will include patches for known vulnerabilities and up-to-date anti-malware uses the most current database of threats
   • Malware, short for malicious software, is a blanket term for viruses, worms, trojans and other harmful computer programs hackers use to wreak destruction and gain access to sensitive information.