System Threat

System Threat

1. Malware

   • definition: software written in order to infect a computer to commit crimes like fraud or identity theft
     • effects: - the computer may crash, - the internet connection may be slow,- files may be deleted or become corrupt or encrypted
       • prevention:-strong security software,-

2. Phishing

   • definition: is an online fraud technique used by criminals to entice you to disclose personal information
     • effects: accessing a victim's account and withdraw money- open new bank or credit card accounts in the victim's name- financial services
       • prevention:

3. Brute Force Attack

   • definition:a trail and error method used by programs to decode encrypted data such as passwords or Data Encryption Standard keys
     • effects:-theft of data,-access to corporate and private computer sytems
       • prevention:-network lock out policy,-staff training,-challenge response tests

4. SQL injection

   • definition: a code injection technique used to attack data driven applications. if those applications have been coded securely, text can be entered into a box and will be executed by the server
     • effects: - contents of the data base can be output, - data in the data base can be amended or deleted, - new rogue records can be added
       • prevention:- validation of input fields,- using parameterised queries, - data base permissions, - penetration testing

5. Denial of Service Attack

   • definition: flooding a server with useless traffic causes servers to become overloaded preventing them from responding to legitimate client-server requests from customers
     • effects:revenue losses, -productivity loss, reputation damage
       • prevention: strong security software (firewall),packet filters on routers,-configuration of the website,-good network policy

6. Data Interception

   • definition: an attacker monitors data streams to or from a target, in order to gather sensitive information. this attack usually involves sniffing network trafficing
     • effects: discovering username or password credentials, - gaining access to systems,disclosure of corporate data,- theft of data
       • prevention:- strong encryption,- using virtual networks,- staff training,- network forensics