System Threats

System Threats

1. Malware

   • What is it?Software written to infect computers and commit crimes such as fraud and identity theft. Malware has become big business in the cyber underworld.
   • EffectsThe computer may crash, reboot or slow down without any logical explanation. • Files may be deleted, become corrupt or encrypted. However, the worst symptoms of malware are often the ones that you do not see. Malware might be designed to record the keys that you press on your keyboard.
   • Prevention: Strong security software (firewall, spam filter, anti-virus, anti-spyware, anti-spam) - Enable OS updates - Staff training: caution opening attachments - Back up files regularly

2. Phishing

   • Phishing is an online fraud technique used by criminals in an attempt to try and gain access your usernames, passwords and bank details. Criminals pretend to be a well known company and ask you for your personal data, this could be from an email or website.
   • - Strong security software (firewall, spam filter, anti-virus, anti-spam). - Staff training: awareness of spotting fake websites & emails. - Staff training: never disclose personal or financial information. - Staff training: disable pop-ups.
   • Gaining access to your bank details. Getting access to hig value data

3. Brute force attack

   • A brute force attack is a trial and error method used by programs to decode encrypted data such as passwords or Data Encryption Standard (DES) keys, through exhaustive effort rather than employing intellectual strategies.
   • • Theft of data. • Access to private computer systems.
   • . • Staff training: using effective passwords that contain symbols and numbers. • Challenge response tests e.g. reCAPTCHA user has to look at a picture and answer a question.

4. SQL injection

   • - Validation of input fields. - Using parameterised queries. - Using database permissions. - Penetration testing.
   • Can reveal data normally hidden

5. Data interception and theft

   • An attacker monitors data streams to or from a target, in order to gather sensitive information. This attack usually involves sniffing network traffic. Sniffing or eavesdropping is the act of monitoring traffic on the network for data such as plaintext passwords or configuration information. With a simple packet sniffer program, an attacker can easily read all plaintext traffic.
   • • Discovering username and password credentials. • Gaining access to systems. • Disclosure of corporate data. • Theft of data.
   • • Strong encryption. • Using virtual networks. • Staff training: use of passwords, locking and portable storage devices. • Network forensics

6. Denial of service attack

   • Flooding a server with useless traffic causes servers to become overloaded preventing them responding to legitimate client-server requests from users. Many DoS attacks, such as the Ping of Death and Teardrop attacks, exploit limitations in the TCP/IP protocols. DDoS is a type of attack where multiple compromised systems, which are often infected with a Trojan, are used to target a single system causing a Denial of Service attack.
   • • Revenue losses: downtime affects profits. Based on industry surveys, the average cost of downtime is over £4000/minute • Productivity Loss: when critical network systems are shut down, your workforce’s productivity comes to a halt. • Reputation Damage: your brand suffers if customers can’t access your site or become casualties of a data breach
   • • Strong security software (firewall). • Packet filters on routers. • Configuration of the webserver. • Good network policy: audits, logs, monitoring.