Cyber Security

Page 1

What is cyber security?

It's the protection of computer systems, networks and data from criminal activity.

There are multiple processes, practices and technologies that are designed to protect networks, computer programs and data from attack, damage and unauthorized access.

Threats

weak and default passwords

misconfigured access rights

removable media

unpatched and/or outdated software

social engineering techniques

malicious code

Page 2

Threats to Cyber Security

Page 3

Social engineering is the way criminals manipulate people so that they will give away personal data such as passwords, bank account details etc.

Page 4

Types of social engineering

Blagging

Phishing

Pharming

Shouldering

In security systems, people are the weak link because they make mistakes.

Blagging

Blagging is the act of knowingly or recklessly obtaining or disclosing personal data or information without the consent of the controller of the data."

The reason may vary from being locked out of their account to needing to install an update on their machine.

Employees should receive high quality security training in order to alert them to the dangers of blagging and how to avoid it.

Phishing

Phishing is when emails/text messages are sent in order to steal money, get log in details or steal identity.

These messages usually appear to be someone you trust e.g. your bank or a friend in need.

You should always be aware of links in emails. Always check where they actually link to. Genuine emails will always be addressed to you personally and they may contain spelling errors.

Pharming

Pharming is a way in which you are redirected to a fake site when you try and access a genuine one.

This can happen when an attacker puts code onto your hard drive or server.

When you type in a genuine website address, this will take you to a bogus site where you will be asked to divulge personal data.

On a secure website, there should be a padlock in the address bar not anywhere else.

Ensure that the web address is genuine

Shouldering

Shouldering is when someone physically watches someone enter their details it doesn't require any technology.

I.e looking at someones password when they are making a bank withdrawal at an ATM.

You should ensure that no one is stood directly behind you cover the keypad when you enter your pin number or make sure no one is watching when you enter a password.

Page 5

Malware

Malware is the term given to malicious software.

This is a program that enters a computer system and does harm to that system.

What is a computer virus?

A computer virus enters your system without your knowledge and can then copy itself to other computers.

They are usually transferred to other computers and can be caught by transferring files through a USB drive or more commonly through attachments sent with emails.

Most computer viruses will alter, delete or damage the files in the computer system.

They cannot damage the actual hardware of the system but can corrupt the software that enables the hardware to function correctly.

The virus copies itself many times and can slow down a system so much that is stops working.

A Trojan horse - software that pretends to be something useful, so the user downloads it, but actually it does something else. These do not copy themselves but can still do damage to a computer system and may allow unauthorized access to your computer system.

Spyware - collects information about users so that it can be used for fraudulent purposes. Keylogger software is used to record the user's keystrokes and can find out people passwords bank details etc. Spyware can be transferred like viruses or Trojan horses so you must use the same precautions to avoid accidentally allowing them onto your system.

Adware - software that is automatically downloaded and installed on your computer so you are directed to advertising material. This is a nuisance but does not normally corrupt, delete files but can interfere with peoples' use of the system.

How can you avoid malware?

Don't download software from websites unless you know they are a genuine trusted websites.

Avoid looking at websites that show inappropriate material as they usually carry viruses or other malware.

Don't open email attachments.

Don't put other people's USB storage media into your computer without scanning it for viruses first.

Page 6

network forensics