System security

System security

1. Forms of attack

   • Malwear
   • Phishing
     • Phishing is the fraudulent practice od sending emailspurporting to be from reputable companies in order to induce individuals to reveal personal information such as passwords and credit card numbers
   • people / employees being the weak point
   • Brute force attack
     • a brute force attack is a trial and error method used to obtain information such as a user password or a personal indentification number (pin)
   • DDOS
     • DDoS is short for distibuted denial service. DDoS is a type of DOS attack where muliple compriswed systems are used to target a single system causing a denial of service
   • Data interception and theft
   • SQL Injection
     • an SQL injecyion is a computer attack in which mallicous code is embedded in aporly designed application
   • Poor network policy

2. identifying and preventing vulnerabilities

   • penetration testing
     • the practice of testing a computer system in order to find vulnerabilities that a hacker could exploit
   • Network forensics
     • are the capture recording and analysis of network events in order to discover the source of the security attacks or other problem incidents
   • network policies
   • Anti malware software
   • fire - walls
   • user access levels
   • passwords
   • encryption