System Threats

System Threats

1. Malware

   • Malware (short for malicious software) is written to take information and passwords for the purpose of identity theft and other crime.
     • The effects of malware include: files being deleted, the computer crashes or the malware uses your computer or router to find other computers to infect. In severe cases the malware uses a keylogger to find frequently used words that could be used as passwords to gain access to emails and bank accounts.
       • You can prevent malware by regularly updating anti-virus software and backing up files so they don't get deleted in the case of an attack. However one of the most effective ways to to educate people on dangerous emails and messages.

2. Phishing

   • Phishing is a fraud technique used to obtain information such as usernames and passwords. Criminals disguise themselves as legitimate companies asking you to do things such as reset your account.
     • Effects of phishing include: obtaining information such as passwords to withdraw money and gaining access to sensitive data
       • To prevent phishing you can: Train your staff and use strong securtity software (including spam filters)

3. Brute Force Attack

   • Brute force attack is a trial and error method to acquire data such as passwords.
     • The effects of a brute force attack include the theft of data and access to systems.
       • To prevent Brute force attacks to must lock the user out after a number of attempts, use response tests such as RECAPTCHA

4. Denial Of Service

   • This is when you flood a server with useless traffic which causes the server to overload and crash.
     • Effects of a DOS attack: A loss of revenue and a damaged reputation for your site or company.
       • To prevent this you can: use strong security software, packet filters and a good network policy.

5. Data Interception

   • The attacker monitors data coming to or from a target in order to gather information such as passwords and other sensitive information by sniffing network traffic.
     • The effects of data interception include: Discovering personal info such as name and password, gaining access to passwords and data theft.
       • To prevent this you can: use strong encryption, use virtual networks and train your staff.

6. SQL injection

   • SQL injection is a coding technique that attacks websites and servers that have not been set up correctly code is entered and will then be executed.
     • Effects of SQL injection include: Contents of the database can be output revealing data,Data in the database can be amended and deleted.
       • To prevent this you should use penetration testing and use validation of input fields.

Images and files in the map