1.5 - System Security & Malware

1.5 - System Security & Malware

1. Types of Malware

   • Virus - Attach themselves to files and copy themselves when the user copies or opens a file. It can delete your files or slow your device down.
   • Worm - Similar to a virus, copying themselves, but the user doesn't have to do anything for them to multiply. It often sends infected emails to all addresses saved to spread itself.
   • Trojan - Malware pretending to be a legitimate program, like a film, videogame or song.
   • Spyware - Malware that allows the user of it to obtain information off of another's device without the other knowing. it usually targets personal data like passwords or search history.

2. Types of Attacks

   • Passive: Network traffic is monitored, then data is intercepted.
   • Active: Someone deliberately attacks a network with malware (eg. a Virus).
   • Insider: Someone with network access abuses this to steal data.
   • Brute Force: Trial and error until a password is attack.
   • DoS: Network is flooded with useless data to slow the network down to an unusable level.
   • SQL Injection: SQL commands are typed into the input boxes on websites to access data / alter the database.
   • Phishing: Emails with links that trick people into entering their personal data.
   • Social Engineering: When a person manipulates someone else into handing over personal data.

3. How to Counter each type of Attack

   • Passive: Encryption so that intercepted data cannot be understood.
   • Active: A firewall & antivirus software.
   • Insider: User access levels to control how much data people can access.
   • Brute Force: Making passwords difficult to guess & locking accounts after X failed attempts.
   • DoS: Difficult to defend, but a firewall can help.
   • SQL Injection: Having strong validation on all input boxes so that only expected data can be entered.
   • Phishing: Looking for signs that an email is not from a real company / person.
   • Social Engineering: Policies and rules for staff about handing over data & training staff.

4. Other Key Terms

   • Malware: Malicious software intended to cause harm.
   • Penetration Testing: Organisations employ professionals to try and hack their network so that they can find areas of weakness.
   • User Access Levels: Different employees have different levels of access to programs, websites and data.
   • Encryption: Data is scrambled so that it cannot be understood if intercepted. It can only be decrypted with the correct key.
   • Network Forensics: Data packets are captured as they enter the network and analysed to find out the cause of a network attack.