System Threats

System Threats

1. Malware

   • Effects
     • Slow or crashing computor
     • Slow internet connection
     • Stolen identity or banking details
   • Prevention
     • Strong security software
     • Enable OS updates
     • Be carefull opening attachments
     • Back up files
   • Makware is software used to disrupt computer systems, get access to private computer systems, and gather sensitive information

2. Phishing

   • Prevention
     • Strong Security Software
     • Disable pop-ups
     • Never disclose personal or financial information
     • Awareness of spotting fake websites and emails
   • Effects
     • Access of banking accounts
     • Gain access to high-value corporate data
     • Open bank accounts
   • Phishing is the attempt to obtain sensitive information such as usernames, passwords or bank details.

3. Brute Force Attack

   • Effects
     • Theft of data
     • Access to corporate and private computer systems
   • Prevention
     • Network lockout policy: locks out after a number of tries
     • Staff training: using effective passwords that contain symbols and numbers
     • Challenge response tests e.g. reCAPTCHA – user has to look at a picture and answer a question
   • A brute force attack consists of an attacker trying many passwords with the hope of eventually guessing correctly.

4. Denial of Service Attack

   • A denial of service attack works by making a website or network grind to a halt. It does this by flooding it with useless network communications, such as repeated login requests
   • Effects
     • Revenue losses: downtime affects profits
     • Productivity Loss: when critical network systems are shut down, your workforce’s productivity comes to a halt
     • Reputation Damage: your brand suffers if customers can’t access your site or become casualties of a data breach
   • Prevention
     • Strong security software
     • Packet filters on routers
     • Configuration of the webserver
     • Good network policy

5. Data Interception

   • Effects
     • Discovering username and password credentials
     • Gaining access to systems
     • Disclosure of corporate data
     • Theft of data
   • Data interception and theft is the taking or intercepting of computer based information without the person knowing.
   • Prevention
     • Strong encryption
     • Using virtual networks
     • Staff training: use of passwords, locking and portable storage devices
     • Network forensics

6. SQL Injection

   • SQL is a programming language and an SQL injection attack happens when a hacker targets a database or a website form.
   • Prevention
     • Validation of input fields
     • Using parameterised queries
     • Penetration testing
     • Using database permissions
   • Effects
     • Contents of the database can be output, revealing data that otherwise would be hidden
     • Data in the database can be amended and deleted
     • New rogue records can be added