System Threats

System Threats

1. Malware

   • Definition of Malware: Software written to infect computers and commit crimes such as fraud and identity theft.
   • The computer may crash, reboot spontaneously, or slow down without logical explanation.
     • When a worm infects a computer, the internet connection may slow down due to the worm, searching for other computers to infect.
       • Files may be deleted, corrupted, or encrypted.
   • The Effects of Malware
   • Preventing Malware
     • Strong security software (Firewall, Spam Filter, Anti-Virus, Anti Spyware, Anti Spam.
     • Enable OS updates.
       • Back up files regularly.
     • Staff training: Caution opening attachments.
   • Definition

2. Phising

   • The Effects of Phising
     • Accessing a victim's accounts and withdraw money or purchase merchandise or services
       • Open new bank or credit-card accounts in a victim's names, and use the new account to cash illegitimate checks or purchase merchandise
         • Gaining access high-value corporate data.
           • Financial services can blacklist institutions, resulting in reputational damage.
   • Definition
     • Phishing is an online fraud technique used by criminals to entice you to disclose personal information such as usernames, passwords and credit card details by disguising as a trustworthy entity in an electronic communication.
   • Preventing Phising
     • Strong security software (firewall, spam filter, anti-virus, anti spam), Staff training: awareness of spotting fake websites and emails, Staff training: never disclose personal or financial information, Staff training: disable pop-ups

3. Brute Force Attack

   • Preventing Brute Force Attack
     • Network lockout policy: locks out after a number of tries, Staff training: using effective passwords that contain symbols and numbers, Challenge response tests e.g. reCAPTCHA - user has to look at the picture and answer a question
   • Definition
     • Brute force attack is a trial and error method used by programs to decode encrypted data and passwords or Data Encryption Standard (DES) keys.
   • The Effects of Brute Force Attack
     • Theft of Data.
       • Access to corporate and private computer systems

4. Denial of Service Attack

   • Definition
     • Flooding a server with useless traffic causes servers to become overloaded preventing them responding to legitimate client-server requests from users.
   • The Effects of Denial of Service Attack
     • Revenue losses: downtime affects profits. Based on industry surveys, the average cost of downtime is over £4000/minute
       • Productivity Loss: When critical network systems are shut down, your workforce's productivity comes to a halt
       • Reputation Damage: Your brand suffers if customers can't access your site or become casualties of a data breach.
   • Preventing Denial of Service Attack
     • Strong security software (firewall). Packet filters on routers. Configuration of the webserver. Good network policy: audits, logs, monitoring

5. Data Interception

   • Definition
     • An attacker monitors data streams to or from a target, in order to gather sensitive information. This attack usually involves sniffing network traffic
   • Preventing Data Interception
     • Strong encryption, Using virtual networks, Staff training: use of passwords, locking and portable storage devices, network forensics
   • The Effects of Data Interception
     • Discovering username and password credentials.
       • Gaining access to systems
         • Disclosure of corporate data.
           • Theft of data.

6. SQL Interception

   • Preventing SQL Interception
     • Validation of input fields. Using parameterised queries. Using database permissions. Penetration testings.
   • Definition
     • SQL injection is a code injection technique, used to attack data-driven applications. If a database application has not been coded in a secure way, code can be entered into text boxes, and will be executed by the server.
   • The Effects of SQL Interception
     • Contents of the database can be output, revealing data that otherwise would be hidden.
       • Data in the database can be amended and deleted
         • New rouge records can be added.