1.6 System security

1.6 System security

1. Penetration testing

   • A penetration test is when a company hires a hacker to hack their systems to see if their system works well enough to prevent cyberhacks

2. Network Forensics

   • Network forensics is a sub-branch of digital forensics relating relating to the monitoring and analysis of a computer network

3. Poor network policy

   • it is important for every organization to have documented IT security policies , to help the protect the company assets

4. Forms of attacks

   • phishing
     • Phishing is the fraudulent attempt to obtain sensitive information such as usernames, passwords and credit card details by disguising oneself as a trustworthy entity in an electronic communication.
   • DDOS
     • DDoS is a type of DOS attack where multiple compromised systems, which are often infected with a Trojan, are used to target a single system causing a Denial of Service (DoS) attack.
   • MiTM
     • In cryptography and computer security, a man-in-the-middle attack (MITM) is an attack where the attacker secretly relays and possibly alters the communications between two parties who believe they are directly communicating with each other.
   • Drive-By Attack
     • When creating a drive-by download, an attacker must first create their malicious content to perform the attack. With the rise in exploit packs that contain the vulnerabilities needed to carry out drive-by download attacks, the skill level needed to perform this attack has been reduced.
   • SQL Injection Attack
     • An SQL injection is a computer attack in which malicious code is embedded in a poorly-designed application and then passed to the backend database. The malicious data then produces database query results or actions that should never have been executed.

5. Malware

   • Malware, or malicious software, is any program or file that is harmful to a computer user. Types of malware can include computer viruses, worms, Trojan horses and spyware.

6. Ciphering

   • In cryptography, a cipher (or cypher) is an algorithm for performing encryption or decryption—a series of well-defined steps that can be followed as a procedure. An alternative, less common term is encipherment. To encipher or encode is to convert information into cipher or code.