System Security

System Security

1. Threats

   • Malware
   • Phishing
   • People As The Weak Point In Secure Systems (Social Engineering)
   • Brute Force Attacks
   • DDOS
   • Data Interception And Theft
   • SQL Injection
     • SQL injection is a code injection technique, used to attack data-driven applications, in which nefarious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker).
   • Poor Network Policy

2. Prevention

   • Penetration Testing
     • Penetration testing (also called pen testing) is the practice of testing a computer system, network or Web application to find vulnerabilities that an attacker could exploit.
   • Network Forensics
     • Network forensics is a sub-branch of digital forensics relating to the monitoring and analysis of computer network traffic for the purposes of information gathering, legal evidence, or intrusion detection. Unlike other areas of digital forensics, network investigations deal with volatile and dynamic information.
   • Network Policies
     • Network policies are sets of conditions, constraints, and settings that allow you to designate who is authorized to connect to the network and the circumstances under which they can or cannot connect.
   • Anti-Malware Software
   • Anti-Virus Software
   • Firewalls
   • User Access Levels
   • Password
   • Encryption