System threats

System threats

1. Malware

   • Malware—software written to infect computers and commit crimes such as fraud and identity theft. Eg. trojans, worms, keyloggers
     • - Strong security software (firewall, spam filter, anti-virus, anti-spyware, anti-spam) - Update anti-virus software frequently - Enable OS updates - Staff training: caution opening attachments - Back up files regularly
     • Effects: • The computer may crash, reboot spontaneously or slow down without any logical explanation. • When a worm infects a computer, the internet connection may become slow as the worm searches online for other computers to infect. • Files may be deleted, become corrupt or encrypted. However, the worst symptoms of malware are often the ones that you do not see.

2. Phishing

   • Phishing is an online fraud technique where a criminal poses as a trusted person or company in order to steal your information. A common phishing practice involves spamming recipients with a fake message under the name of a trusted institution. The purpose of this fake message is to trick you into providing personal information.
     • • Strong security software (firewall, spam filter, anti-virus, anti-spam). • Staff training: awareness of spotting fake websites & emails. • Staff training: never disclose personal or financial information. • Staff training: disable pop-ups.
     • Effects :• Accessing a victim’s account and withdraw money or purchase merchandise or services. • Open new bank or credit-card accounts in a victim’s names, and use the new account to cash illegitimate checks or purchase merchandise. • Gaining access high-value corporate data. • Financial services can blacklist institutions, resulting in reputational damage.

3. Data interception & theft

   • Data interception

4. DDoS

   • Ddos'ing is flooding a server with useless traffic causes servers to become overloaded preventing them responding to legitimate client-server requests from users.

5. Brute force attacks

   • A brute force attack is a trial and error method used by programs to decode encrypted data such as passwords or Data Encryption Standard (DES) keys, through exhaustive effort rather than employing intellectual strategies.
     • Effects: • Theft of data. • Access to corporate and private computer systems.
       • Prevention: • Network lockout policy: locks out after a number of tries. • Staff training: using effective passwords that contain symbols and numbers. • Challenge response tests e.g. reCAPTCHA – user has to look at a picture and answer a question.

6. SQL injection

   • • Contents of the database can be output, revealing data that otherwise would be hidden. • Data in the database can be amended and deleted. • New rogue records can be added.
     • - Validation of input fields. - Using parameterised queries. - Using database permissions. - Penetration testing.
       • Prevention: - Validation of input fields. - Using parameterised queries. - Using database permissions. - Penetration testing.

Images and files in the map