System Threats

System Threats

1. Data interception

   • an attacker monitors data streams to or from a target in order to gather sensitive information. this attack usually involves sniffing network traffic
     • Discovering username and password credentials. Gaining access to systems. Disclosure of corporate data. Theft of data.
       • Strong encryption. Using virtual networks. Staff training: use of passwords, locking and portable storage devices. Network forensics.

2. denial of survice attack

   • flooding a server with useless traffic causes to become overloaded preventing them responding to legitimate client server requests from users
     • Revenue losses: downtime affects profits. Based on industry surveys, the average cost of downtime is over £4000/minute. Productivity Loss: when critical network systems are shut down, your workforce’s productivity comes to a halt. Reputation Damage: your brand suffers if customers can’t access your site or become casualties of a data breach.
       • Strong security software (firewall). Packet filters on routers. Configuration of the webserver. Good network policy: audits, logs, monitoring.

3. Brute force attack

   • A brute force attack is a trial and error method used by programs to decode encrypted data such as passwords or Data Encryption Standard keys, through exhaustive effort rather than employing intellectual strategies.
     • Theft of data. Access to corporate systems
       • Network lockout policy: locks out after number of tries expires. Effective software: progressive delays. Staff training: using effective passwords that contain symbols and numbers. Challenge response tests e.g. reCAPTCHA

4. Phishing

   • Phishing is an online fraud technique it want's to get your personal information like usernames, passwords and credit card details by disguising as a trustworthy entity in an electronic communication
     • Accessing a victim’s account and withdraw money or purchase merchandise or services. Open new bank or credit-card accounts in a victim’s names, and use the new account to cash illegitimate checks or purchase merchandise. Gaining access high-value corporate data. Financial services can blacklist institutions, resulting in reputational damage.
       • Strong security software (firewall, spam filter, anti-virus, anti-spam). Staff training: awareness of spotting fake websites & emails. Staff training: never disclose personal or financial information. Staff training: disable pop-ups.

5. Malware

   • computer software designed to commit crimes like fraud and identity theft
     • Malware may crash your computer slow down without any logical explanation files may be deleted become corrupt or encrypted
       • strong security software(firewall, spam filter, anti-virus, anti-spyware, anti-spam) Enable OS updates Staff training :caution opening attachments Back up files regularly

6. SQL injection

   • SQL injection is a code injection technique, used to attack data-driven applications. If a database application has not been coded in a secure way, code can be entered into text boxes, and will be executed by the server.
     • Contents of the database can be output, revealing data that otherwise would be hidden. Data in the database can be amended and deleted. New rogue records can be added.
       • Validation of input fields. Penetration testing.