System Threats

System Threats

1. Malware

   • software which is specifically designed to disrupt, damage, or gain authorized access to a computer system.
   • The effects of malware
     • • The computer may crash, reboot spontaneously or slow down without any logical explanation. • When a worm infects a computer, the internet connection may become slow as the worm searches online for other computers to infect. • Files may be deleted, become corrupt or encrypted. However, the worst symptoms of malware are often the ones that you do not see. Malware might be designed to record the keys that you press on your keyboard, for example, creating a text log that your computer sends to a hacker periodically. The hacker then scans the text log, looking for passwords that he can use to access your email or bank accou
   • Preventing malware
     • • Strong security software (firewall, spam filter, anti-virus, anti-spyware, anti-spam) • Enable OS updates • Staff training: caution opening attachments • Back up files regularly

2. Brute Force Attack

   • A brute force attack is a trial-and-error method used to obtain information such as a user password or personal identification number (PIN). In a brute force attack, automated software is used to generate a large number of consecutive guesses as to the value of the desired data.

3. SQL Injection Attack

   • An SQL injection is a computer attack in which malicious code is embedded in a poorly-designed application and then passed to the backend database. The malicious data then produces database query results or actions that should never have been executed.

4. Data Interception

   • When packets travel across a network, they are susceptible to being read, altered, or “hijacked.” Hijacking occurs when a hostile party intercepts a network traffic session and poses as one of the session endpoints. An attacker monitors data streams to or from a target, in order to gather sensitive information.

5. Phishing

   • the fraudulent practice of sending emails purporting to be from reputable companies in order to induce individuals to reveal personal information, such as passwords and credit card numbers.
   • The effects of phishing
     • • Accessing a victim’s account and withdraw money or purchase merchandise or services. • Open new bank or credit-card accounts in a victim’s names, and use the new account to cash illegitimate checks or purchase merchandise. • Gaining access high-value corporate data. • Financial services can blacklist institutions, resulting in reputational damage
   • Preventing phishing
     • • Strong security software (firewall, spam filter, anti-virus, anti-spam). • Staff training: awareness of spotting fake websites & emails. • Staff training: never disclose personal or financial information. • Staff training: disable pop-ups.

6. Denial Of Service Attack

   • In computing, a denial-of-service attack (DoS attack) is a cyber-attack where the perpetrator seeks to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a host connected to the Internet.