System Threats

System Threats

1. Malware

   • Description of malware
     • Software written to infect computers and affect how they work
   • Preventing malware
     • Have strong and up-to-date security software
     • Enable OS updates, as they often have built in security software
     • Train staff to be aware of malware and how it can infect their computers
     • Back up files regularly so they can be reinstalled after your computer has been infected
   • Effects of malware
     • Computer crashing/rebooting/slowing down
     • Internet connection becoming slow
     • Files deleted/corrupted/encrypted
     • Key logging (recording the keys you are pressing into a text log for a hacker to see)
   • Examples of malware
     • Trojans
     • Key loggers

2. Phishing

   • Examples of phishing
     • E-mails
     • Web sites
     • Hyper links/pop-ups
   • Description of phishing
     • An online fraud technique used to gather private and personal information such as passwords
   • Preventing phishing
     • Have strong and up-to-date security software
     • Staff training
       • Awareness of spotting fake websites & emails
       • Never disclose personal or financial information
       • Disable pop-ups
   • Effects of phishing
     • Bank accounts being used to withdraw money/purchase merchandise and services
     • Loss of high-value data
     • New bank accounts being created under a victim's name to store illegitimate checks or the purchase of merchandise
     • Financial services blacklisting institutions (reputational damage)

3. Brute force attack

   • Effects of brute force
     • Theft of data
     • Access to private computer systems
   • Description of brute force attack
     • A trial and error method used to decode encrypted data (e.g. passwords)
   • Preventing b.f.a.
     • Network lockout policy
     • Staff training: Effective and secure passwords
     • Challenge response tests

4. Denial of service

   • Preventing attacks
     • Strong and up-to-date anti-virus software
     • Packet filters on routers
     • Configuration of the webserver
     • Good network policy: audits, logs, monitoring
   • Examples of denial of service
     • Ping of Death
     • Teardrop
     • Titanium stresser
   • Effects of Denial of service attacks
     • Revenue losses: downtime affects profits made by companies
     • Reputation damage

5. SQL Injection

   • Description of SQL Injection
     • A code injection technique used to attack data-driven applications
   • Effects of SQL Injection
     • Hidden data can be revealed
     • Data can be changed and deleted
     • New rogue records can be added
   • Preventing SQL Injection