Untitled

Page 1

unauthorised access/ hacking

black hat hacking

without owners permission

remote sysyems

White hat hacking is where companies pay hackers to find vunerabilities and hack the comany system

Grey hat hacking is where hackers will find vunerabilities but do not take advantage of them

Social engineerig is where hackers contact vicitims through email or phone and manipulate them into giving up sensitive information

Phishing

whre a hacker will send a fak email pretending to be from a legitemate company

makes user give up inmportantt details on a fake website

usually say it ius because of an error in bank or large order or unauthorised access

usernames, passwords and credit card details are the things most commonly stolen and can be sold to other criminals or used to perchase goods

Pharming

User is maliciously sent to a fake website and is told to input credit card details

hackers gather lots of peoples information at once and so gain access to passwords, files nd usernames

Man in the middle

An attack where the communicatin between two devices is interupted and possibly tampered wiyth and read by a hacker or another user

Used to steal corporate emails and request money, which can be diverted and stolen to their own accounts

Encyrption can help as encrypted data is harder for hackers to read and copy

Page 2

Internal threats

Downloads from the internet which may have viruses that infect IT systems

Visiting untrustowrthy sites which may contain phishing threats or downlaodable viruses

use of portable storage devices which can cause many systems to become infected alog with the data on the harddrive

Disclosure of data which means users data can be released, such as adresses. This ogften means storage systems have to be wiped

Stealing or leaking information which can be for finacial, socal or economic gain

using override security controls which means somone with a lower level of authority hacks the security and can access data they do not legally have access to

Delete custo0mer records

Steal confifdential information

create fake invoices that will be paid to their own bank accounts

install malware