System security

System security

1. Threats

   • malware
     • worms
     • virus'
     • trojan
     • spyware
     • ransomware
   • Phishing
     • trick uses into giving information
       • pretends to be genuine
   • social engineering
     • using people as a weak point
   • Brute force
     • continuously tries different passwords
   • DOS
     • continuously asking access to a server
       • crashes/slows server
   • poor network policies
     • no security rules to follow
       • weak security
         • easy to attack
   • Data interception/theft
     • data is intercepted and stolen
   • SQL injection

2. prevention

   • penetration testing
     • testing resilience
       • find weakness and exploit them
     • authorised
   • network forensics
     • monitoring network traffic
     • at regular intervals, data is copied
       • identify invasive traffic
   • network policies
     • secure passwords
       • change regularly
     • regular backup
     • penetration testing
     • anti-malware
   • anti-malware software
     • detect
       • prevent
         • remove
     • scans files and checks them
   • firewalls
     • monitors data traffic
     • block suspicious packets
   • user access levels
     • different users = different data
     • need to know basis
     • reduces threat level
   • passwords
     • prevent unauthorised access
       • CAPITALS
       • !/?\-@
       • 7837205
   • encryption
     • scrambling messages
     • if a hacker gains access they cannot read the data