1.6 System Security

1.6 System Security

1. Malware

   • trojan
     • decieves people to download it
       • deceptive
         • get informed w/ latest tricks
           • program that looks good but is bad
   • designed to gain unauthorised access to a computer system
     • software written to infect computers
       • on internet without protection = at risk
         • fraud and identity theft

2. Phishing

   • online fraud techinque
     • spamming people with fake messages
   • lures people into revealing personal info
     • credit cards, passwords etc.
       • fastest online crime method
         • identity theft

3. Brute Force

   • trial and error method
     • decrypting data (passwords etc)

4. Denial of Service

   • flooding a server with useless traffic
     • prevents them from responding to client server requests
       • service attack (DDOS)
         • multiple infected systems all target one system

5. Data Interception and Theft

   • packet sniffer program
     • the data goes where its not supposed to go
       • monitors traffic
         • stealing data

6. SQL Injection

   • technique to change data in a database
     • by inserting additional code into text input box
   • used to hack data driven applications
     • creates a different search engine

7. WAYS OF PREVENTION

   • penetration testing
     • network forensics
       • network policies
         • anti-malware software
           • firewalls
     • user access levels
       • passwords
         • encryption

8. THREATS IN NETWORK

   • people as 'weak point' (social engineering)
     • network policy