1.6 system security

1.6 system security

1. forms of attack

   • phishing
     • designed to acquire sensitive information
     • commonly sent through email
     • telephone phishing
       • direct phone calls that pretend to be an official service
   • brute force
     • trial and error
       • can be used for gaining access to password-based entry systems
     • consists of an attacker entering possible passwords and phrases until one is correct
   • data interception and theft
     • packets that travel over networks can be intercepted
       • if packets are encrypted a key will be needed
     • packets reassembled by using a signature
   • SQL detection
   • DDOS
     • overloading a website with unwanted traffic
     • uses a number of computers over a network of infected machines which send requests to a website which would bring it offline

2. threats posed to networks

   • poor network policy
     • can expose a network to many threats
     • most networks restrict users to what they can and cant do

3. malware

   • anti malware
     • anti malware
     • malware scan
     • anti spyware