1.6 System security

1.6 System security

1. brute force attacks

   • A brute force attack is a trial-and-error method used to obtain information such as a user password or personal identification number (PIN). In a brute force attack, automated software is used to generate a large number of consecutive guesses as to the value of the desired data.

2. network policies

   • A network security policy, or NSP, is a generic document that outlines rules for computer network access, determines how policies are enforced and lays out some of the basic architecture of the company security/ network security environment.

3. DDOS

   • In computing, a denial-of-service attack is a cyber-attack in which the perpetrator seeks to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a host connected to the Internet.

4. user access levels

   • Part of an access control procedure for computer systems, which allows a system administrator to set up a hierarchy of users. Thus, the low level users can access only a limited set of information, whereas the highest level users can access the most sensitive data on the system. Also called access rights.

5. SQL interjection

   • SQL Injection (SQLi) refers to an injection attack wherein an attacker can execute malicious SQL statements (also commonly referred to as a malicious payload) that control a web application's database server (also commonly referred to as a Relational Database Management System – RDBMS).

6. passwords

   • a string of characters that allows access to a computer, interface, or system. Examples of strong passwords: ePYHc~dS*)8$+V-' , qzRtC{6rXN3N\RgL , zbfUMZPE6`FC%)sZ. Examples of weak passwords: qwert12345, Gbt3fC79ZmMEFUFJ, 1234567890, 987654321, nortonpassword. 6. /

7. anti-malware policies

   • These antimalware policies include information about the scan schedule, the types of files and folders to scan, and the actions to take when malware is detected. When you enable Endpoint Protection, a default antimalware policy is applied to client computers.

8. network forensics

   • Network forensics is a sub-branch of digital forensics relating to the monitoring and analysis of computer network traffic for the purposes of information gathering, legal evidence, or intrusion detection. Unlike other areas of digital forensics, network investigations deal with volatile and dynamic information.

9. firewalls

   • In computing, a firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules.

10. penetration testing

11. data interception and theft

    • The unauthorized taking or interception of computer-based information. Data theft is the act of stealing computer-based information from an unknowing victim with the intent of compromising privacy or obtaining confidential information.

12. encryption