Computer Science - Network Security

Computer Science - Network Security

1. Malware stands for Malicious Software

2. Malware is designed to corrupt software

3. Virus - attaches itself to a file/programme and when opened, it can delete or damage data

4. Worm - can self-replicate and spread across networks. It doesn't need user action to spread and can slow down networks/systems.

5. Spyware - secretly monitors a user's activity - such as keystrokes or browser history - and then sends the information to a third party.

6. Adware - automatically displays unwanted advertisements, usually through pop-ups. It can slow down a system and sometimes track user behaviour.

7. Ransomware - locks or encrypts files on a computer and demands payment to restore access

8. Trojan horse - disguises itself as a legitimate software which can trick many people into installing it so that it can steal data and give hackers access

9. Phishing - social engineering attack where criminals trick users into giving away personal information by pretending to be a trusted organisation.

10. Email phishing - fake emails from trusted companies and asks users to click links and provide personal information.

11. Smishing - phishing but on SMS containing urgent messages or suspicious links

12. Spear phishing - targets one individual person or organisation by using personal details to seem more convincing

13. Brute force attack - hackers guessing passwords repetitively until they guess it

14. Preventing a brute force attack

    • Account locking after several failed attempts
    • Long but memorable passwords
    • Use numbers, lower and upper case, symbols
    • Don't use common things such as names

15. DoS - Denial of service attack

16. DoS - cyber-attack where a hacker floods a computer system or network with too much traffic causing it to slow down, crash or become unavailable to users

17. DDoS - Distributed Denial of Servise attack

18. DDoS attack is a type of cyber attack where many computers send a large amount of traffic to a server or website at the same time making it slow or completely unavailable to users

19. Data theft can occur through phishing emails, stolen devices and hacking into databases

20. Data interception can happen when data is being sent over a network

21. SQL injection - a type of cyber-attack where someone tries to trick a website into giving them access to its database by typing harmful code into a form

22. SQL injections mainly target databases

23. Weak passwords are a vulnerability because it allows hackers to easily guess your password and access your account and details

24. You can prevent network vulnerabilities by regularly updating software and firmware

25. Preventing phishing

    • Train people
    • Check the sender
    • Install strong security software

26. Preventing malware

    • Install anti-virus software + anti-spyware + anti-spam
    • Keep software updated
    • Download from trusted sources
    • Use a firewall

27. Prevent brute force attack

    • Have a network lockout policy
    • 2-factor authentication
    • train people
    • Use challenging response

28. Preventing DoS attack

    • Having a strong firewall
    • Packet filters on routers
    • Configure the web servers
    • Auditing logging

29. Preventing data interception

    • Use secure websites
    • Avoid public Wi-Fi for sensitive tasks
    • use a VPN
    • Use encrypted messaging apps

30. Preventing data theft

    • Strong passwords
    • turn on 2-factor authentication
    • lock your devices
    • Keep software updated
    • Be careful what you share online

31. Physical security is protecting company systems and data by preventing unauthorised physical access

32. Wearing an id badge can be an example of physical security because it can tell other people where you are and where you should be

33. Biometric access can be an example of physical security because they can control who can get into what rooms and who can access different accounts

34. Security cameras can be an example of physical security because it can monitor where people go and what they are doing at all times

35. Alarm systems can be an example of physical security because if someone is where they shouldn't be, the security guards will be alerted

36. Locked rooms can be an example of physical security because people can only get in if they have a key.