System Threats

System Threats

1. Malware

   • Preventions of being exposed to malware includes: you should download and update regularly strong security software (firewall, spam filter, anti-virus, anti-spyware, anti-spam) // Enable OS updates // Staff training: caution opening attachments // Back up files regularly
   • Effects of malware could be that the computer crashes or reboots instantly or slow down without any logical explinations. If a worm infects a computer, the internet connection will become slow as the worm searches for other computers. Files maybe deleted, become corrupt or encrypted. Malware can also record what is being pressed on the keyboard so the hacker can get usernames and then find the password.
   • Malware is a piece of software that is written to infect computers and commit crimes such as fraud. If a computer used for shopping, banking and email you are putting yourself at high risk of victimized.

2. (DDos) Denial of service attack

   • To prevent a DDos (Denial of service attack ) you can : Install strong security software (firewall), have packet filters on routers, configuration of the webserver and good network policy: audits, logs, monitoring.
   • Effects of this are: Massive revenue losses: downtime affects profits. Based on industry surveys, the average cost of downtime is over £4000/minute, productivity loss: when critical network systems are shut down, your workforce’s productivity comes to a halt and reputation damage: your brand suffers if customers can’t access your site or become casualties of a data breach.
   • Denial of service attack is when you flood a server with useless traffic causes servers to become overloaded preventing them responding to legitimate client-server requests from users
     • DDoS is a type of attack where multiple compromised systems, which are often infected with a Trojan, are used to target a single system causing a Denial of Service attack.

3. Data interception

   • Preventing data interception includes: strong encryption for your systenms, using virtual networks to hide your location, making your staff do training learning: use of passwords, locking and portable storage devices and network forensics.
   • Effects of Data Interception is: Discovering username and password credentials, the attacker gaining access to systems, disclosure of corporate data and theft of data.
   • Data Interception is when an attacker monitors data streams to or from a target, in order to gather sensitive information. This attack usually involves sniffing network traffic. Sniffing or eavesdropping is the act of monitoring traffic on the network for data such as plaintext passwords or configuration information. With a simple packet sniffer program, an attacker can easily read all plaintext traffic.

4. Brute force attack

   • Effects of a brute force attack include : Theft of data and access to corporate and private computer systems.
   • Ways of preventing these attacks include : Setting up a network lockout policy: locks out after a number of tries, staff training: using effective passwords that contain symbols and numbers and a challenge response tests e.g. reCAPTCHA – user has to look at a picture and answer a question.
   • A brute force attack is a trial and error method used by programs to decode encrypted data such as passwords or Data Encryption Standard (DES) keys, through exhaustive effort rather than employing intellectual strategies.

5. Phishing

   • - Strong security software (firewall, spam filter, anti-virus, anti-spam). // Staff training: awareness of spotting fake websites & emails. // Staff training: never disclose personal or financial information. // Staff training: disable pop-ups.
   • Access people's accounts to get money or buy merchandise. Another effect is the phisher can open a new account in the victim's name or gain access to high-value corporate data and to Financial services can blacklist institutions, resulting in reputational damage.
   • Is an online fraud technique to get personal details such as usernames and passwords. It is the fastest rising method of cyber crime. Phishers use emails with links to fake websites that look like the real website. The purpose of phishing is to gain personal details.

6. SQL injection attack

   • SQL injection is a code injection technique, used to attack data-driven applications. If a database application has not been coded in a secure way, code can be entered into text boxes, and will be executed by the server.
   • Preventing an SQL Injection attack includes the following preventions: Validation of input fields using a algorithm to allow only certain information to be entered, using parameterised queries ,using database permissions and conducting Penetration testing, for example seeing how far someone can hack into a system.
   • Effects of an SQL Injection attack includes ; Contents of the database can be output, revealing data that otherwise would be hidden, Data in the database can be amended and deleted and new rogue records can be added.

Images and files in the map