Computer science Homework

Computer science Homework

1. Brute Force attack

   • Brute-force Attack can be prevented by: ✓ Using strong passwords ✓ Locking accounts after a certain number of login attempts ✓ Using 2 step verification (e.g. a code sent to mobile phone to confirm identity)
     • Star Topology
       • All nodes indirectly connect to each other through a switch, hub or router. The switch acts as a central point through which all communications are passed.

2. Passive Attack

   • Passive attacks can be detected and prevented by: ✓ Using encryption ✓ Using network forensics ✓ Using penetration testing

3. Malware

   • Malware can be detected and prevented by: ✓ Running anti-malware software regularly ✓ NOT downloading software from unknown sources ✓ NOT clicking on unknown links ✓ Scanning downloaded files before opening them ✓ NOT using removable media (e.g. a USB drive) as they may contain malware ✓ Using automatic software updates: up-to- date software will include patches for known vulnerabilities and up-to-date anti- malware uses the most current database of threats

4. Social Engineering Threats

   • Social engineering threats can be detected and prevented by: ✓ Creating user access levels ✓ Using an effective network policy ✓ Ensuring users have strong passwords ✓ Using biometric identification measures ✓ Installing physical security (e.g. locked rooms) ✓ Ensuring user privacy settings on any social media are set to maximum so that attackers cannot find information about users (e.g. date of birth, address) ✓ Ensuring user awareness of unsolicited texts, emails and phone calls. Users should not give personal, confidential information away ✓ Applying email filtering to prevent suspect emails getting through. ✓ Ensuring that users check the URL in the website address. ✓ Using a website filter ✓ Ensuring users are aware of who is around them when they are typing in their password.

5. Structured Query Language (SQL) Injection

   • Structure Query Language (SQL) Injection - can be detected and prevented by: ✓ Using penetration testing to check for vulnerabilities in the SQL code and report back ✓ Validating user input so that the website form will not accept SQL statements or characters ✓ Escaping input strings so that any SQL characters are ignored when processing the input from a website form ✓ Using only prepared statements to restrict the SQL that can be executed. The input data from a website form can only be used by previously prepared SQL statements, which are processed separately to the input data

6. What is Network Forensics?

   • Network forensics is the capturing, recording and analysis of network traffic to discover attacks. This can be done using packet sniffing software and web server logs which show when data was accessed.

7. What is Penetration Testing?

   • Penetration testing is used to identify possible weaknesses in a network’s security by trying to exploit them. The results are then reported back and any weaknesses are fixed. A white box penetration test is used to simulate an inside attack where the attacker may have some knowledge of the system and basic credentials. A black box penetration test is used to simulate an outside attack (i.e. hacker)

8. What is Encryption?

   • Encryption scrambles the data packets being sent and received across the network or outside the network so that unauthorised users cannot access personal information without the encryption key.

9. What is a Network Policy?

   • A network policy is a set of rules and procedures that an organisation will follow to ensure their network is protected against attacks. An effective network policy will encrypt sensitive data, have an acceptable use policy, install ant-malware and install a firewall. The policy will also enforce the use of strong passwords that are changed regularly and will enforce the regular testing of the network for weaknesses.

10. What are User Access Levels?

    • User access levels control which part of the network users can access. User access levels are used to limit the number of people with access to important data, helping to prevent inside attacks on the network.

11. Mesh Topology

    • In a mesh topology there is no central connection point. Each node is connected to at least one other node (usually to more than one). A node is capable of sending communications to and receiving communications from other nodes. The nodes pass on communications until they reach their final destination. There are two types of mesh topology: full mesh topology and partial mesh topology

12. Nodes

    • Any device connected to a network is referred to as a node. All nodes are connected to the network either by a wire or wirelessly.

13. Topology

    • Topology A network's topology is the arrangement, or pattern, in which all nodes on a network are connected together. Today, the most common topologies used are the star topology and the mesh topology