1.6 system security

1.6 system security

1. Threats posed to networks: Malware, Phishing People as the weak point in secure systems (social engineering), Brute force attacks, DDOS, Data interception and theft SQL injection Poor network policy

2. Identifying and preventing vulnerabilities: Penetration testing, Network forensics, Network policies, Anti-malware software Firewalls, User access levels and Passwords Encryption

3. A penetration test is an authorized simulated attack on a computer system, performed to evaluate the security of the system.

4. network forensics s a sub-branch of digital forensics relating to the monitoring and analysis of computer network traffic for the purposes of information gathering, legal evidence, or intrusion detection.

5. network policies are are sets of conditions and settings that allow you to designate who is authorized to connect to the network and the circumstances under which they can or cannot connect.

6. Anti-malware software protects against infections caused by many types of malware, including all types of viruses, as well as rootkits, ransomware and spyware. Anti-malware software can be installed on an individual computing device, gateway server or dedicated network appliance.

7. encryption is the most effective way to achieve data security. To read an encrypted file, you must have access to a secret key or password that enables you to decrypt it. Unencrypted data is called plain text ; encrypted data is referred to as cipher text.

8. DDOS - DDOS is short for Distributed Denial of Service. DDOS is a type of DOS attack where multiple compromised systems, which are often infected with a Trojan, are used to target a single system causing a Denial of Service

9. poor network policy could expose a network to numerous threats: using softwares, opening links from a fraudulent account and turning off firewalls.