Network security threats

Network security threats

1. Network policy

   • Set of rules/instructions/procedures which are followed to protect a network
     • Pentesting
       • Employ specialists to attempt to hack the network to identify possible weaknesses.
     • Network forensics
       • Investigations trying to discover the cause or location of attacks.
         • Prevent subsequent attacks
     • Passwords
       • A string of characters that must be entered to gain access to an account
         • Should be strong- Brute force
     • User access levels
       • Controls which parts of a network different groups of users can access
         • Limits amount of people with access to important data- insider attack
     • Anti-malware
       • Software which scans files periodically to check if there is any malware.
         • If found malware is either destroyed or placed in quarantine.
       • Firewall controls what devices can send data packets to a network
     • Encryption
       • Coding data so that it can only be read with the correct key
         • Essential for sending data securely across a network
           • Passive attack

2. Malware

   • Software created to harm or slow down a network
     • Scareware
     • Spyware
     • Ransomware
     • Rootkits
     • Opening backdoors
     • Virus
     • worms
     • Trojans

3. Social engineering

   • Gaining illegal access to a network or sensitive data through influencing
     • Often over telephones
       • Pretending to represent a company.
     • Phishing
       • Emails that pose as a companies websites. request to update personal information. Steals it to access account

4. Forms of attack

   • Passive attack
     • Data on a network is monitored and waited for any sensitive data to intercept
   • Active attack
     • Is where software is sent onto the computer to Damage a network
   • Insider attack
     • Someone who is part of the network exploits access to steal data or damage the network.
   • DDoS
     • Hacker floods the network with useless packets of data to slow/ stop the network running.
   • Brute force attack
     • Uses trial and error through automated software to crack passwords