System Threats

System Threats

1. Malware

   • What it is?
     • Effects
       • Prevention
         • Strong security software
         • Enables OS updates
         • Back up files regularly
       • Malware can sneak malicious Trojan horse programs onto unsecured PCs.
     • Software that is written to infect computers.
       • Used to commit crimes such as fraud and identity theft.

2. Phishing

   • What is it?
     • Phishing is an online fraud technique used by criminals to entice you to disclose personal information such as usernames, passwords and credit card details by disguising as a trustworthy entity in an electronic communication.
     • Effects
       • • Accessing a victim’s account and withdraw money or purchase merchandise or services. • Open new bank or credit-card accounts in a victim’s names, and use the new account to cash illegitimate checks or purchase merchandise. • Gaining access high-value corporate data
       • Prevention
         • - Strong security software (firewall, spam filter, anti-virus, anti-spam). - Staff training: awareness of spotting fake websites & emails. - Staff training: never disclose personal or financial information. - Staff training: disable pop-ups.

3. Brute Force Attack

   • What is it?
     • A brute force attack is a trial and error method used by programs to decode encrypted data such as passwords or Data Encryption Standard
     • Effects
       • • Theft of data. • Access to corporate systems.
       • Prevention
         • - Network lockout policy: locks out after number of tries expires. - Effective software: progressive delays. - Staff training: using effective passwords that contain symbols and numbers.

4. Denial of service attack

   • What is it?
     • Flooding a server with useless traffic causes servers to become overloaded preventing them responding to legitimate client-server requests from users.
     • Effects
       • • Revenue losses: downtime affects profits. Based on industry surveys, the average cost of downtime is over £4000/minute • Productivity Loss: when critical network systems are shut down, your workforce’s productivity comes to a halt.
       • Prevention
         • - Strong security software (firewall). - Packet filters on routers. - Configuration of the webserver. - Good network policy: audits, logs, monitoring.

5. Data interception and theft

   • What is it?
     • An attacker monitors data streams to or from a target, in order to gather sensitive information. This attack usually involves sniffing network traffic
     • Effects
       • • Discovering username and password credentials. • Gaining access to systems. • Disclosure of corporate data. • Theft of data.
       • Prevention
         • - Strong encryption. - Using virtual networks. - Staff training: use of passwords, locking and portable storage devices. - Network forensics.