unit 1.6: system security(1)

unit 1.6: system security(1)

1. MALWARE

   • Also known as malicious software
   • Software which can be malicious if damaging to a computer or network
   • Examples include: viruses, worms and trojan horses

2. VIRUSES

   • Malicious software designed to cause harm to a network or computing system
   • Attaches itself onto files and programs on computers

3. WORMS

   • Replicates itself to spread onto other computers
   • The worm exploits vulnerabilities across the computer network
   • Unlike a virus, it does not need to attach to a program

4. TROJAN HORSES

   • Malicious computer program
   • Designed to access a computer by misleading users of its intent

5. SOCIAL ENGINEERING

   • Relies on human interaction
   • Tricks users into breaking normal security procedures
   • Method does not revolve around technical cracking techniques such as worms or viruses

6. COMPUTER PHISHING

   • Form of social engineering
   • Most common phishing attacks are sent through emails
   • Designed to acquire sensitive information

7. TELEPHONE (IVR) PHISHING

   • Direct phone calls that pretend to an official service
   • Would request similar prompts to a bank if the exploit was to gain banking information

8. DATA INTERCEPTION AND THEFT

   • Data travels across networks in packets
   • If packets are encrypted they cannot be read without a key
   • Data can be intercepted physically

9. NETWORK POLICIES

   • Outline rules for network access
   • Most common in Acceptable Use Policy (AUP)

10. POOR NETWORK POLICY

    • Could expose a network to numerous threats
    • Users could be unaware of the threats
    • Most networks restrict users to what they can/cannot do