System Threats

System Threats

1. Malware

   • Software that infects computers and commits crimes.
   • Examples include Trojans and spyware
   • Effects: Computer crashes/reboots/slowdowns, slower internet, file deletion/corruption/encryption, keylogging
   • Prevention: Strong updated antivirus software, regular OS updates, training to look for red flags, regular file back ups

2. Phishing

   • Phishing is an online fraud technique used by criminals to entice victims to disclose personal information such as usernames, passwords and credit card details by disguising as a trustworthy company or individual in an electronic communication (typically email).
   • Effects: Accessing accounts and withdrawing money, opening new bank or credit-card accounts in a victim’s names and using the new account to cash illegitimate checks or purchase merchandise, gaining access high-value corporate data, loss of reputation
   • Prevention: Strong antivirus software, spam filters, staff training (awareness of spotting fake websites & emails, never disclose personal or financial information), disable pop-ups.

3. Brute Force Attack

   • A brute force attack is a trial and error method used by programs to decode encrypted data such as passwords, Data Encryption Standard (DES) keys and usernames via trying every single possible combination.
   • Effects: Theft of data, access to private or public servers
   • Prevention: network lockout policy locks out after a number of tries, staff training (using effective passwords that contain symbols and numbers), challenge response tests e.g. reCAPTCHA (user has to look at a picture and answer a question)

4. Denial of Service

   • Denial of Service is a type of attack where the attackers prevent legitimate users from accessing the service
   • Effects: Revenue losses (downtime affects profits) average cost of downtime is over £4000/minute, productivity loss, reputation damage (brand suffers if customers can’t access your site)

5. SQL Injection

   • SQL injection is a code injection technique used to attack data-driven applications such as databases. If a database application has not been coded securely, code can be entered into text boxes, and could be executed by the server.
   • Effects: Contents of the database can be displaying data that otherwise would be hidden, data in the database can be amended or deleted, new rogue records can be added
   • Prevention: Validation of input fields, using parameterised queries, using database permissions, penetration testing.

6. Data Interception and Theft