1.6 System Security

1.6 System Security

1. Threats posed to networks

   • Malware
     • A software which is made to damage a computers software
     • E.g a virus which is damaging your computer
   • Phishing
     • attempt to obtain sensitive information such as usernames, passwords
     • E.g sending emails to people with their passwords and personal details
   • People as the weak point in secure systems (social engineering)
     • an attack vector that relies heavily on human interaction and often involves tricking people into breaking normal security procedures.
     • Staff not knowing how a network works
   • Brute force attacks
     • A trial and error process in which they encode passwords using exhaustive efforts (brute force)
       • E.g Hacking talk talk and send loads of requests until they gave up
   • DDOS
     • is a type of DOS attack where multiple compromised which are often infected with a Trojan, are used to target a single system causing a Denial of Service (DoS) attack
     • such as a server, website or other network resource, and cause a denial of service for users of the targeted resource.
   • Data interception and theft
     • stealing computer based info from an unknown person
     • E.g getting hacked,
   • SQL injection
     • a computer attack in which it targets a poorly designed application and attacks the spine of the system which makes it do things it shouldn't
     • E.g An computer without a antivirus, it'll go to the computer and then affect the whole network
   • Poor network policy
     • A set of rules for using networks when they're poorly made can cause people to hack
     • E.g not following policy rules like leaving computers unattended

2. Identifying and preventing vulnerablilities

   • Penetration Testing
     • testing yourself how secure your security by attempting to hack it
     • Attempting to break into your own code
   • Network Foreniscs
   • Network Policies
     • A set of rules followed by people in a network to keep everyone safe and prevent hacks
   • Anti-Malware Software
     • software that prevents malwares from damaging your computer
     • Found in computers , phones etc
   • Firewalls
     • A type of protection used by anti viruses
   • User Access Levels
     • Different ranked people can access different types of data
     • E.g the the Janitor won't be able to access patient files
   • Password
     • A code that is yours that no one knows just for you to keep your cookies/ things pivate
     • the simpler the password the easier to hack
   • Encryption
     • data is broken down into code. To translate the key is needed