System Threats

System Threats

1. Malware

   • Software designed with malicious intent
     • Preventing malware - Strong security software (firewall, spam filter, updated anti-virus, anti-spyware, anti-spam) - Enable OS updates - Staff training: caution opening attachments
       • Examples - Key logger, Rootkit, Trojan, Spyware, Virus, Worm etc.
         • Malware causes your connection to slow down Malware causes your computer to slow down; badly written code can cause your computer to crash. Malware can cause your computer to display error messages continually. Malware could cause your computer to be incapable of shutting down or restarting as it keeps certain processes active. Malware could be used for identity theft to gather personal information or data from your computer. Malware can hijack your browser to redirect you to sites for its purposes.

2. DDOS

   • (DDoS) attack occurs when multiple systems flood the bandwidth or resources of a targeted system
     • Bandwidth limits Automated Mitigation Upstream Blackholing Third Party Provider
       • DDoS attack on BBC
         • Revenue losses Productivity loss Reputation Damage Theft

3. Phishing

   • To "fish" people into give away details of personal information
     • Train your staff, spam filter, common sense
       • This could result in financial losses for users and even prevent them from accessing their own accounts. Loss of productivity. Excessive resource consumption on corporate networks (bandwidth, saturated email systems, etc.)

4. Brute force attacks

   • When computing hardware is used to gain access to an account or computer system by guessing
     • Use a recaptcha, have a timeout for too many login attempts.

5. SQL injection

   • A code injection technique used to attack data-driven apps. If a database app has not been coded in a secure way, code can be entered into text boxes and will be executed by the server
     • penetration testing Validation of input fields Using database permissions Using parameterised queries
       • Contents of the database can be outputted Data can be amended or deleted New rogue records can be added