1.6 System Security

1.6 System Security

1. The forms of attack

   • (1)Malware, (2)Phishing, (3)Brute force, (4)Denial of service, (5)Data interception, theft, (6)Poor network policy, (7)People as the weak point in secure systems (social engineering), (8)DDOS and (9)SQL injection.
   • Identifying and preventing the vulnerabilities
     • (1)Penetration testing, (2) Network torensics, (3) Anti malware software, (4)Firewalls, (5)Network policies, (6)User access levels, (7)Passwords and (8) Encryption

2. Key words:Malware, Viruses, Worms, Trojan horses, Phishing, Social Engineering, Data interception, Networks policies

   • Malware: Otherwise known as 'malicious software', Malware is a software which can be malicious if damaging to a computer or network. Examples include viruses, worms and trojan horse.
   • Viruses:Malicous software designed to cause harm to a network or computer system, it attatches itself and progames or files on a computer or server, it can affect all components of an operating system and around 82,000 vriuses are made each day
   • Worms:Replicates itself in order to spread to other computers, often using a computer network. In order to achieve this, the worm exploits vulnerabilities across the computer network, unlike a virus it does not need to attach to a program
   • Trojan Horses:Malicious computer program, designed to access a computer by misleading users of its intent. Example: Email appearing to have benn swent from a bank asking to download security software which would improve security where in fact the software intention is to give unauthorised access to the sytem
   • Computer phishing:Form of social enginerring, designed to acquire sensitive information such as usernames, passwords, card details etc. Most common phishing attack are sent through email.
   • Social Engineering:Relies on human interaction (social skills, commonly involves tricking users into breaking normal security procedures. Method does not revolve around technical cracking techniques such as worms or viruses

3. Key words: Brute force attacks, DDOS, Botnet, Exploit, SQL injection.

   • Brute force attacks: Trial and error method, can be used for gaining access to password-based entry systems. Consists of an attacker trying possible passwords and passphrases until a correct one is found.
   • DDOS: Overloading a website with unwanted traffic, uses a number of computers over a network of infected machines which send requests to a website which would bring it offline
   • Where an attacker can execute malicious SQL statements using software which controls a database management system. By exploiting the vulnerabilities of SQL through injection, attackers could access systems containing customer data, intellectual property and other sensitive information.

4. Keywords: Network forensics, Penetration testing, Network policies, Anti malware software, Firewalls, Anti-virus, Legislation and Packet sniffing.

   • Network Forensics: A branch of digital forensics, covers the forensic investigation of networks and their devices attached to them, primarily involves the examintion of data sent across a network. May involve the use of various forensic techniques.
   • Packet sniffing: Packet sniffing involves the interception of packets across a network. Packet sniffing tools can helklp users understand what is being sent around the network at the time, most tools reveal all data sent over the network, although a lot of it may br encryptefd. Performing packet sniffing without express written permision of all partiesq is in breach of UK law
   • Penetration testing:Tests performed under a controlled enviroment by a qualified person, checks for current vulnerabilities and explores potential ones in order to expose weaknesses in the system so they cannot be maliciously exploited. May use tools to help them in their duties, performed by a penetration testser