System Threats

System Threats

1. Malware

   • software written to infect computers and commit crimes such as fraud and identity theft.
     • The computer may crash, reboot spontaneously or slow down without any logical explanation. When a worm infects a computer, the internet connection may become slow as the worm searches online for other computers to infect. Files may be deleted, become corrupt or encrypted. there may also be a key logger installed this can be used to gain passwords and bank details
       • Effects
     • Strong security software (firewall, spam filter, anti-virus, anti-spyware, anti-spam) Enable OS updates Staff training: caution opening attachments Back up files regularly
       • Protection
     • examples
       • Virus-a piece of code which is capable of copying itself and typically has a detrimental effect, such as corrupting the system or destroying data.
         • Trojan horse-any malicious computer program which is used to hack into a computer by misleading users of its true intent.
           • Spyware-software that enables a user to obtain covert information about another's computer activities by transmitting data covertly from their hard drive.
             • Ransomeware-a type of malicious software designed to block access to a computer system until a sum of money is paid.

2. Phishing

   • Phishing is an online fraud technique used by criminals to entice you to disclose personal information such as usernames, passwords and credit card details by disguising as a trustworthy entity in an electronic communication.
     • Accessing a victim’s account and withdraw money or purchase merchandise or services. Open new bank or credit-card accounts in a victim’s names, and use the new account to cash illegitimate checks or purchase merchandise. Gaining access high-value corporate data.
       • effects
     • Strong security software (firewall, spam filter, anti-virus, anti-spam). Staff training: awareness of spotting fake websites & emails. Staff training: never disclose personal or financial information. Staff training: disable pop-ups.
       • protection

3. Brute force attack

   • A brute force attack is a trial and error method used by programs to decode encrypted data such as passwords or Data Encryption Standard (DES) keys, through exhaustive effort rather than employing intellectual strategies.
     • Theft of data. Access to corporate and private computer systems.
       • effects
     • Network lockout policy: locks out after a number of tries. Staff training: using effective passwords that contain symbols and numbers. Challenge response tests e.g. reCAPTCHA – user has to look at a picture and answer a question.
       • protection

4. denial of service attack

   • Flooding a server with useless traffic causes servers to become overloaded preventing them responding to legitimate client-server requests from users.
     • Revenue losses: downtime affects profits. Based on industry surveys, the average cost of downtime is over £4000/minute Productivity Loss: when critical network systems are shut down, your workforce’s productivity comes to a halt. Reputation Damage: your brand suffers if customers can’t access your site or become casualties of a data breach.
       • effects
     • Strong security software (firewall). Packet filters on routers. Configuration of the webserver . Good network policy: audits, logs, monitoring.
       • protection

5. SQL injection

   • SQL injection is a code injection technique, used to attack data-driven applications. If a database application has not been coded in a secure way, code can be entered into text boxes, and will be executed by the server.
     • Validation of input fields. Using parameterised queries. Using database permissions. Penetration testing.
       • protection
     • Contents of the database can be output, revealing data that otherwise would be hidden. Data in the database can be amended and deleted. New rogue records can be added.
       • effects

6. Data interception

   • An attacker monitors data streams to or from a target, in order to gather sensitive information. This attack usually involves sniffing network traffic. Sniffing or eavesdropping is the act of monitoring traffic on the network for data such as plaintext passwords or configuration information.
     • Discovering username and password credentials. Gaining access to systems. • Disclosure of corporate data. Theft of data.
       • Effects
     • Strong encryption. Using virtual networks. Staff training: use of passwords, locking and portable storage devices. Network forensics.
       • Protection

Imágenes y archivos del mapa