System Threats

System Threats

1. Malware

   • Malware(malicious software) is used to harm computers and commit crimes like fraud or identity theft.
     • The effects of malware include the computer being slow or crashing, files being deleted or becoming corrupt/encrypted, worms can infect computers, causing the wifi connection to become slow,
       • Preventions against malware include downloading strong security software(firewall, spam filter, anti-virus, anti-spyware, anti-spam)

2. Phishing

   • Phishing is a technique used by criminals to force you into enclosing personal information such as usernames, passwords and credit card details, by posing as important companies such as Amazon, Halifax and Apple.
     • It is one of the fastest rising techniques among frauds of trying to steal personal information from users.

3. Brute Force Attack

   • A brute force attack is when criminals use a trial and error method to find out user's passwords and data, through exhaustive effort.
     • The effects of brute force attacks include theft of data and access to corporate or private computer systems.
       • Ways to prevent brute force attacks include network lockout policy, which is when a user is logged out of a system after a no. of unsuccessful tries at getting a password, staff training and challenge response tests, e.g. reCAPTCHA, where the user is required to look at a picture and

4. SQL Injection

   • An SQL Injection is a code injection technique used to attack data driven applications. If an application hasn't been coded in a secure way, code can be entered into text boxes, and executed by the server.
     • The effects of SQL Injections include data in databases being amended and deleted, new rogue records being added and contents of the databases that would otherwise be hidden, being revealed.
       • Ways to prevent SQL Injections include validation of input fields(if the user enters something incorrect, they will be made to enter it again), or penetration testing(testing new computer systems for vulnerabilities that attackers can exploit).

5. Data Interception

   • Data Interception is when an attacker monitors data streams to/from a target to gather sensitive information. The attack involves monitoring traffic on the network for data such as passwords or configuration information.
     • Effects include discovering usernames and passwords, access to systems, theft of data and disclosure of corporate data