System Threats

System Threats

1. Malware

   • Software written to infect computers and commit crimes such as fraud and identity theft
     • Effects: computer may crash or slow down, internet connection becomes slow because the worm searches online for more computer to infect, files may be deleted, become corrupt or encrypted
       • Prevention: strong security software (firewall, spam filter, anti-virus, anti-spyware,anti-spam), enable OS updates, staff training: caution opening attachments, Back up files regularly

2. Phishing

   • Phishing is an online fraud technique used by criminals to entice you to disclose personal information such as usernames, passwords and card details by disguising as a trustworthy entity in an electronic communication
     • Effects: accessing a victim's account and withdraw money or purchase merchandise or services, open a new bank or credit-card accounts in a victim's name, gaining access high-value corporate data, financial services can blacklist institutions
       • Prevention: strong security software (firewall, spam filter, anti-virus, anti-spam), staff training: awareness of spotting fake websites and emails, staff training: never disclose personal or financial information, staff training: disable pop ups

3. Brute Force attack

   • A brute force attack is a trial and error method used by programs to decode encrypted data such as passwords or Data Encryption Standard (DES) keys, through exhaustive effort rather than employing intellectual strategies.
     • Effects: Theft of data, Access to corporate and private computer systems.
       • Prevention: Network lockout policy: locks out after a number of tries, staff training: using effective passwords that contain symbols and numbers, challenge response tests e.g. reCAPTCHA – user has to look at a picture and answer a question.

4. Denial of service

   • Flooding a server with useless traffic causes servers to become overloaded preventing them responding to legitimate client-server requests from users. Many DoS attacks, such as the Ping of Death and Teardrop attacks, exploit limitations in the TCP/IP protocols.
     • Effects: Revenue losses: downtime affects profits. based on industry surveys, the average cost of downtime is over £4000/minute, productivity Loss: when critical network systems are shut down, your workforce’s productivity comes to a halt, Reputation damage: your brand suffers if customers can’t access your site or become casualties of a data breach.
       • Prevention: Strong security software (firewall), packet filters on routers, configuration of the webserver, good network policy: audits, logs, monitoring.

5. SQL injection

   • SQL injection is a code injection technique, used to attack data-driven applications. If a database application has not been coded in a secure way, code can be entered into text boxes, and will be executed by the server.
     • Effects: Contents of the database can be output, revealing data that otherwise would be hidden, data in the database can be amended and deleted, new rogue records can be added,
       • Prevention: Validation of input fields, penetration testing

6. Data interception

   • This is when an attacker monitors data streams to and from a target, in order to gather sensitive information.
     • Effects: Discovering username and password credentials, gaining access to systems, disclosure of corporate data, theft of data
       • Prevention: strong encryption, using virtual networks, staff training: use of passwords, locking and portable storage devices, network forensics

Imágenes y archivos del mapa