Network Security Threats

Network Security Threats

1. Brute Force Attack

   • Unauthorised access to a network can be gained by using a computer program to try all possible password combinations until the correct password is found. This will give the hacker unauthorised access to the computer network.
   • Account lock after too many incorrect passwords
   • 2-step verification

2. Computer Virus

   • A computer virus is a piece of code which is capable of copying itself and typically has a detrimental effect, such as corrupting the system or destroying data.
   • Anti-malware software

3. Phishing

   • Phishing is a type of social engineering attack often used to steal user data, including login credentials and credit card numbers. It occurs when an attacker, masquerading as a trusted entity, dupes a victim into opening an email, instant message, or text message. The recipient is then tricked into clicking a malicious link, which can lead to the installation of malware, the freezing of the system as part of a ransomware attack or the revealing of sensitive information.
   • Knowing that if it's good to be true then it's a scam
   • Don't ignore updates

4. Spyware

   • Spyware is software that enables a user to obtain covert information about another's computer activities by transmitting data covertly from their hard drive.

5. Trojan Horse

   • A Trojan horse is any malware which misleads users of its true intent. The term is derived from the Ancient Greek story of the deceptive Trojan Horse that led to the fall of the city of Troy.
   • Anti-malware software

6. DDoS Attack

   • A Distributed Denial-of-Service (or DDoS) is a malicious attempt to disrupt the normal traffic of a targeted server, service or network by overwhelming the target with a flood of Internet traffic.
   • Firewall

7. Computer Worm

   • A computer worm is a type of malware that spreads copies of itself from computer to computer. A worm can replicate itself without any human interaction, and it does not need to attach itself to a software program in order to cause damage.
   • Anti-malware software

8. SQL Injection

   • SQL injection is a web security vulnerability that allows an attacker to interfere with the queries that an application makes to its database. It generally allows an attacker to view data that they are not normally able to retrieve. This might include data belonging to other users, or any other data that the application itself is able to access. In many cases, an attacker can modify or delete this data, causing persistent changes to the application's content or behavior.
   • Penetration testing
   • Validation of user input

9. Social Engineering

   • The use of deception to manipulate individuals into divulging confidential or personal information that may be used for fraudulent purposes.
   • The use of biometric measures
   • User access levels