system threats

system threats

1. malware

   • prevention:• Strong security software (firewall, spam filter, anti-virus, anti-spyware, anti-spam) • Enable OS updates • Staff training: caution opening attachments • Back up files regularly
   • Malware—software written to infect computers and commit crimes such as fraud and identity theft.
   • Effects:• The computer may crash, reboot spontaneously or slow down without any logical explanation. • When a worm infects a computer, the internet connection may become slow as the worm searches online for other computers to infect. • Files may be deleted, become corrupt or encrypted. However, the worst symptoms of malware are often the ones that you do not see. Malware might be designed to record the keys that you press on your keyboard, for example, creating a text log that your

2. phishing

   • Phishing is an online fraud technique used by criminals to entice you to disclose personal information such as usernames, passwords and credit card details by disguising as a trustworthy entity in an electronic communication.
   • effects• Accessing a victim’s account and withdraw money or purchase merchandise or services. • Open new bank or credit-card accounts in a victim’s names, and use the new account to cash illegitimate checks or purchase merchandise. • Gaining access high-value corporate data. • Financial services can blacklist institutions, resulting in reputational damage.
   • Preventing phishing • Strong security software (firewall, spam filter, anti-virus, anti-spam). • Staff training: awareness of spotting fake websites & emails. • Staff training: never disclose personal or financial information. • Staff training: disable pop-ups.

3. brute force attack

   • A brute force attack is a trial and error method used by programs to decode encrypted data such as passwords or Data Encryption Standard (DES) keys, through exhaustive effort rather than employing intellectual strategies.
   • The effects of brute force • Theft of data. • Access to corporate and private computer systems.
   • Preventing brute force attacks • Network lockout policy: locks out after a number of tries. • Staff training: using effective passwords that contain symbols and numbers. • Challenge response tests e.g. reCAPTCHA – user has to look at a picture and answer a question.