System Security

System Security

1. Malware

   • Software which is designed to cause harm or disrupt a system
   • Virus
     • Software code created to cause diruption. It can only be transfered though human activity
   • Worms
     • Software code which causes harm to a computer system and the network. It is designed to replicate through a system
   • Trojan
     • Pretends to be something it ios not in order for a infected document to be downloaded
   • Spyware
     • Moniters what the user does and types in order to get personal information such as password and usernames

2. Penertration testing

   • Using an employed hacker to test a organisations system security. It allows them to see where they need to improve in their security.

3. Firewalls

   • Software which stopps unexpected connections entering a network

4. Acess levels

   • Allow different users different levels of access

5. Hacking

   • Gaining unautorized access to a computer or network
   • Different types of hacking
     • Phishing
       • When an attacker poses as a ligimet company and contacts you via email, phone, text message to try and gain informaion such as bank details and passwords
     • Brute force
       • Trial and error method of decoding information such as passwords. It requires no interaction from the attacker
     • DDoS
       • Distributed Denail of Service
         • This is when a computer/network/website is over run by network traffic to crash the website. The attackers then demand money to stop the traffic
     • Packet sniffing
       • When an attacker views and moniters data flow to find out information
     • SQL injection
       • Structured Query Language
         • An SQL injection is used to access and manipulate databases. Hackers can read, write, add and delete to the databases.

6. Encryption

   • Encrypting data is a way to stop people being able to read it once they access it

7. AUP

   • Aceptable Use Policy
     • A document which a user must agree to before accessing a network or the internet

8. People as a weak point

   • Many systems are secure but it is people who allow hackers to gain access
     • Ways to prevent hacking
       • Update firewalls and anti virus
       • Improve staff traing on these matters
       • Improve passwords
       • Spot fake websites
         • Check address for padlock symbol
         • https - s means secure