System Security

System Security

1. Penetration Testing

   • test and check by using things like DoS AND Brute force attack.

2. Network Forensics

   • this monitors network traffic from the network software

3. network policies

   • back up policy
     • The person responsible for backing up The time and frequency that data should be backed up The media on which back ups should be stored on The location of the storage of backups (offsite) The data to be backed up (all or changes since last backup etc.)
   • acceptable use policy
     • Networks should have an Acceptable Use Policy (AUP) They may include rules / procedures such as: Use complex passwords Have different levels of access (only certain people in a company can access sensitive data) Locking computers if the user leaves their desk No installing of software and downloading files from the WWW No use of USB sticks
   • disaster recovery policy
     • The person responsible for backing up The media on which back ups have been stored and its location The organisations who will help supply the resources / hardware to get the system back up and running.

4. ani-virus software

   • Viruses are small programs which aim to cause active harm to a computer system. They often get confused with spyware (which simply spy’s on users, recording key strokes etc. but do not aim to harm the system – just the user).

5. anti-spyware

   • Spyware’s aim is to spy on the user and send back as much information about them as possible (passwords, usernames, websites they visit, purchases they have made).

6. firewalls

   • When files are sent across the internet, they are broken down into small packets of data.
     • The part of the computer which receives these packets is made up of 256 ports (you can think of these ports like a country’s ports, which manage people in and out of the country)