Flashcards
Network Threats
Flashcards do conjunto (20)
- 1Spyware and keyloggersMalware
Software that hides on your computer recording your keystrokes to send back to a third party for analysis. It secretly monitors your actions - 2MalwareMalicious software
Installed on someone's device without their knowledge or consent
One form is deleting or modifying files without consent - 3ScarewareTells the user their computer is infected with lots of viruses to scare them into following malicious links or paying for problems to be fixed
- 4VirusesMalware
A virus is a program that is installed on your computer designed to replicate itself. Viruses cause harm to files and spread to other computers and devices. Users spread them by copying infected files and activate them by opening the infected file. - 5Denial of Service AttacksServers and devices are flooded with too many requests or packets, causing them to crash or become unusable. The hacker tries to stop users from accessing a part of a network or website. Most DOS attacks involve flooding the network with useless traffic which makes the network really slow or completely inaccessible.
- 6Data Interception and TheftData may be intercepted during transmission, but physical theft can occur where storage devices or files are left insecurely
- 7Blagging / Posing as someone you're notSocial engineering
Dishonest persuasion to get someone to share personal or sensitive information by deception - 8Brute force attacksAutomated or manual attempts to gain unauthorised access to secure areas by trying all possible password or key combinations. Simple measures such as locking an account after a certain number of failed attempts and using strong passwords reduces the risk.
- 9ShoulderingLooking over someone's shoulder when they enter their password or PIN
- 10PhishingSocial engineering
Phishing emails redirect a user to a fake website where they trick the reader into sharing confidential information such as passwords that can be used fraudulently - 11Structured Query Language injectionSQL is used to search databases. When data is entered into a web form, the website will contact the database server to find the details and display them. If a hacker enters malicious SQL into the field of the web form instead, it will modify the SQL that is executed. If a website's SQL code is insecure then it can be an easy way for hackers to get past a website's firewall.
- 12Passive attacksWhere someone monitors data travelling on a network and intercepts any sensitive information they find. They use packet sniffers. Hard to detect as the hacker is quietly listening. The best defence against passive attacks is data encryption.
- 13Active attackWhen someone attacks against the network with malware or other planned attacks. They're more easily detected. The main defence against them is a firewall.
- 14Insider attackSomeone within an organisation exploits their network access to steal information
- 15Locking files / ransomwareRansomware encrypts the files on a computer. The user receives a message demanding a large sum of money in order for their files to be decrypted.
- 16RootkitsAlter permissions giving malware and hackers administrator level access to devices
- 17BackdoorsHoles in someone's security which can be used for further attacks
- 18WormsLike viruses but they self replicate without any user help, meaning they can spread very quickly. They exploit weaknesses in network security.
- 19TrojansMalware disguised as legitimate software. Unlike viruses and worms, they don't replicate themselves - the users install them not realising that they have a hidden purpose.
- 20People as a weak pointSocial engineering - The social engineer gains peoples' trust and persuades them to disclose confidential information.
Phishing - Criminals send emails or texts claiming to be from well known businesses and the messages contain spoof versions of the company's website. They request the user's details then use that against them.
Informações
- Descrição
- GCSE Computer Studies FlashCards sobre Network Threats, criado por Izzy DB em 20-12-2021.
- Criado por
- Izzy DB
- Visualizações
- 0
- Avaliação