system security 1.6

system security 1.6

1. Different types of attack: Malware, Phishing, Brute Force, Denial of Service, Data Interception and Theft, SQL Injection.

2. Key Words : Malware, Viruses, Worms, Trojan Horses, Phishing, Social, Engineering, Data Interception, Network Policies

3. Malware otherwise known as "Malicious Software" is a software which can be malicious if damaging to a computer or network. E.g. Viruses, Worms and Trojan Horses.

4. Viruses is a malicious software designed to cause harm to a network or computer system. The virus attaches itself to programs or files on a computer or server. It can effect all components of an operating system. Around 82,000 viruses are made each day

5. Worms replicates itself in order to spread to other computers, often using a computer network. In order to achieve this the worm exploits vulnerabilities cross the computer network

6. Trojan Horses is a malicious computer program designed to access a computer by misleading users of its intent. E.g. Email appearing to have been sent from a bank asking to download a security software which would improve security where infact the software intention is to give unauthorised access to the system

7. Social Engineering relies on human interaction (social skills), it commonly involves tricking users into breaking normal security procedures. The method does not revolve around technical cracking techniques such as worms and viruses.

8. Computer Phishing is a form of social engineering designed to acquire sensitive information such as usernames such as usernames, passwords, card details etc. Most common phishing attacks are through email.

9. Data Interception and Theft is when data travels across networks in packets and the packets can be intercepted. If packets are encrypted, they can not be read without a key. Unencrypted packets can be re-assembled using signatures. Data can also be intercepted physically. E.g. potable hard drives and other external hardware can be stolen.

10. Network Policies are the outline rules for network access. The most common is Acceptable Use Policy (AUP). You may have been asked to an AUP when joining your school.

11. Poor Network Policy could expose a network of numerous threats. Users could be unaware of the risks of: Using software, Opening emails, Turning off firewalls etc.