Security Analsysis

Security Analsysis

1. Risk Associated with storing and Accessing Data

   • Data Breaches
     • Unauthorised access to personal or sensitive data
     • often caused by poor access control or system vulnerabilities
   • Phishing & Social Engineering
     • Attackers trick users into revealing passwords or sensitive data
   • Man-in-the-Middle Attacks
     • INtercepting data transmission between client and server
   • Malware & Ransomeware
     • Malicious software the steals, locks, or corrupts data
   • Data Loss & corruption
     • Hardware failure, accidental deletion, or software bugs
   • Weak Passwords / Poor Authentication
     • Easy-to-guess credentials allow attackers access

2. Didgital Securit Strategies

   • Regular Software Update
     • Fix known vulnerabilities and sevurity flaws
   • Access Control
     • Role-based access limits who can view/modify data
   • Firewall and Antivirus
     • Protect systems from external and internal threats
   • Backups
     • Regular secure backups prevent permanent data loss
   • Audit Logs & Monitoring
     • Detect suspricious access or changes in real time

3. Authentication strategies

   • Username + Strong Password
     • Include special characters, upper/lower case, number
   • Two-Factor Authentication (2FA)
     • Requires a second step like a code or device
   • Biometric Authentication
     • Fingerprint, facial recognition for high-security systems
   • OAuth or Federated Login
     • Use secure external services (e.g. Google login)
   • session Management
     • Auto-logout after inactivity, secure session tokens