System security

System security

1. Threats

   • Malware
     • alware is an abbreviated term meaning “malicious software.” This is software that is specifically designed to gain access or damage a computer without the knowledge of the owner.
   • Phising
     • Phishing is the attempt to obtain sensitive information such as usernames, passwords, and credit card details (and, indirectly, money), often for malicious reasons, by disguising as a trustworthy entity in an electronic communication.
   • People
   • brute force attacks
     • Brute force (also known as brute force cracking) is a trial and error method used by application programs to decode encrypted data such as passwords or Data Encryption Standard (DES) keys, through exhaustive effort (using brute force) rather than employing intellectual strategies.
   • DDOS
     • DDoS is a type of DOS attack where multiple compromised systems, which are often infected with a Trojan, are used to target a single system causing a Denial of Service (DoS) attack.
   • Data interception and theft
     • The unauthorized taking or interception of computer-based information. Data theft is the act of stealing computer-based information from an unknowing victim with the intent of compromising privacy or obtaining confidential information.
   • SQL injection
   • Poor policies

2. Prevention

   • Penetration testing
     • Penetration testing (also called pen testing) is the practice of testing a computer system, network or Web application to find vulnerabilities that an attacker could exploit.
   • Network policies
     • A network security policy, or NSP, is a generic document that outlines rules for computer network access and determines how policies are enforced.
   • Network forensics
     • Network forensics is a sub-branch of digital forensics relating to the monitoring and analysis of computer network traffic for the purposes of information gathering, legal evidence, or intrusion detection.
   • Anti-malware software
     • Anti malware software protects against infections caused by many types of malware, including viruses, worms, Trojan horses, rootkits, spyware, keyloggers, ransomware and adware.
   • Firewall
     • A firewall is a network security system, either hardware- or software-based, that uses rules to control incoming and outgoing network traffic.
   • User access levels
     • Network managers can set up groups of users with different levels of access to the network. At the highest level, the network manager can install and remove software, access all user areas and change permissions.
   • Passwords
     • A password is a string of characters used to verify the identity of a user during the authentication process.
   • Encryption
     • Encryption is the conversion of electronic data into another form, called ciphertext, which cannot be easily understood by anyone except authorized parties