Flashcards
network security threats
Cards in this deck (25)
- 1what is a passive attack?a passive attack is when someone monitors travelling data on a network and intercepts any sensitive information they find. They use hardware such as packet sniffers. they're hard to detect
- 2what is an active attack?An active attack is when someone attacks a network with malware or other planned attacks. They are easy to detect and the main defence against them is a firewall
- 3what is an insider attack?when someone within an organisation exploits their network access to steal information
- 4what is a brute force attack?an attack in which the criminal gains information by cracking passwords through trial and error of combinations. Hackers may try many different passwords. Using strong passwords will prevent this.
- 5what is a denial-of-service attack? (DoS)where a hacker tries to stop users from accessing part of a network or website. Most attacks involve flooding the network with useless traffic, making the network extremely slow or inaccessible.
- 6what is malware?malicious software that is installed on someone else's device, without their knowledge or consent.
- 7what is scare ware?telling the user that they have a virus and scares them into paying for problems to be fixed
- 8what is spyware?spyware secretly monitors user actions, such as key presses and send information to the hacker.
- 9what is root kits?root kits alter permissions, giving malware and hackers administration-level access to devices.
- 10what is opening backdoors?holes in someones security which can be used for further attacks
- 11what is a virus?viruses copy themselves to certain files. Users spread them by copying infected files and activate them by opening infected files.
- 12what is a worm?worms are like viruses, except they self replicate without user help. They spread very quickly and exploit weaknesses in network security
- 13what is a trojan?trojans are malware disguised as legitimate software. They don't replicate, users install them and have a hidden purpose.
- 14what is social engineering?a way of gaining sensitive information or illegal access to networks by influencing people.
- 15where does most social engineering take place?over the phone, asking for passwords pretending to be relevant people, such as IT specialists etc.
- 16what is phishing?another social engineering type. Criminals send legit-looking emails requesting for passwords, security information etc. They mostly request a user updates their information on a Fake WEBSITE!
- 17what is anti-phising software?email programs, browsers and firewalls have anti-phising software. They reduce the number of phishing emails received.
- 18what is SQL-injections?changing the database code to allow a certain code access all information, no matter if it is not the correct pin etc.
- 19what will a good network do?reguarly test the network, to find weaknesses; use strong passwords; enforce user access levels; install anti-malware and firewall software; encrypt sensitive data
- 20what is penetration testing?when organisations employ hackers to find weaknesses
- 21what is network forensics?investigations to find the cause of attacks on networks
- 22how beneficial are passwords?passwords should be strong, many characters long and include numbers, letters and symbols.
- 23what is user access levels?controlling who can access high levels, restraining the insider attacks.
- 24what is anti-malware software?finding and stopping malware from damaging a network
- 25what is encryption?when data is translated into code which only someone with a key can access
Information
- Description
- GCSE Computer Science (Computer Systems) Flashcards on network security threats, created by Katie S on 09/05/2017.
- Created by
- Katie S · May 2017
- Updated
- May 9, 2017
- Views
- 1
- Rating