Network security threats

Network security threats

1. passive attack

   • Where the hacker monitors data travelling on a network

2. Active attack

   • A network attack where the hacker attempts to change data or introduce malware

3. Insider attack

   • A network attack where somewhere within the organisation exploits their network access to steal information.

4. Brute force attack

   • A network attack which uses software to crack security passwords through trial and error.

5. Denial of service attack

   • A network attack which stops users from accessing a part of a network or website.

6. Malware

   • Software created to damage or gain illegal access to computer systems.

7. Phishing

   • When criminals send emails or texts to someone claiming to be a well known business.

8. Social engineering

   • A way of gaining illegal access to data or networks by influencing people.

9. Data interception/theft

   • Stealing data such as passwords or bank details to be used illegally.

10. SQL Injection

    • Malicious SQL code which can be typed into an input box to try and attack the SQL database.

11. Preventions

    • Network policy
      • A set of rules and procedures an organisation will follow to ensure that their network is protected against attacks.
    • Penetration testing
      • The process of simulating attacks on a network to identify weaknesses.
    • Anti malware software
      • Software designed to stop malware from damaging a computer or network.
    • Firewall
      • Controls which programs can send or receive data packets across a network.
    • User access levels
      • Controls what files or areas of the network different groups of users can access.
    • Passwords
      • A string of characters that allows access to certain parts of a computer
    • Encryption
      • Coding data so that it can only be read with the correct key.
    • Validation
      • Checking that the data entered is sensible and meets certain criteria.
    • Periodically
      • When you complete a task at regular intervals, such as a daily malware scan.
    • Quarantine
      • When you isolate files which have been infected by malware. This stops it spreading to other files on your hard drive.
    • Acceptable use policy
      • A set of rules in which users of the network agree to follow.
    • Network forensics
      • Investigations that organisations undertake to find the cause of attacks on their network.