system security

system security

1. form of attacks

   • Malware
     • "Malware" is short for malicious software and used as a single term to refer to virus, spy ware, worm etc. Malware is causes things like identify theft.
   • phishing
     • How it could take place in a call centre
       • Staff respond to fake email
         • Staff respond to fake link
           • Staff respond to fake website
             • Staff respond to spam
               • Staff respond to popup software fake instant messages
                 • Staff respond to social media messages, ‘likes’, etc
       • potential problems to a call centre if phishing takes place
         • Acquisition of user names and passwords
           • Acquisition of financial details/credit card details
             • Identity theft
               • Data theft
                 • Staff disclose personal/confidential data
                   • Financial data theft
   • Brute force
     • An attack that attempts to decode passwords/encryption keys/encrypted data
       • All possible/numerous combinations are attempted
         • A trial and error method
           • Resource/time consuming method
   • Denial service
     • company could take to prepare
       • Networks should be monitored
         • Penetration testing should be undertaken/vulnerabilities should be found
           • Vulnerabilities should be fixed/remedied
             • A response plan should be produced
   • Date interception and theft
     • reasons for
       • Access sensitive data
         • Steal/retrieve personal data
           • Access/steal/retrieve financial dat
             • Create/read/update/modify/delete data
               • Destroy data
   • SQL injection

2. anti-malware that should be used to protect a laptop

   • anti virus
   • anti spyware
   • malware scanner

3. examples of social engineering that employees at the call centre should be aware of

   • Pharming
     • Blagging/pre-texting
       • Shoulder surfing
         • Baiting scenarios
           • Countermeasures
             • Tailgating
               • Responses to fictitious s
                 • Quid-pro-quo
                   • Hoax viruses

4. strong password

   • At least eight characters
     • include upper case
       • Include lower case
         • Include special characters
           • Include numbers
             • Does not include a name, company name or user name
               • Does not contain a complete word
                 • Relates to an acronym

5. Caesar cipher

   • Method in which each letter in the plaintext is replaced by a letter some fixed number of positions down the alphabet.