System Threats

System Threats

1. Malware

   • software written to infect computers and commit crimes such as fraud and identity theft.
     • • The computer may crash. • Files may be deleted
       • • Strong security software • Enable OS updates • Staff training • Back up files regularly

2. phishing

   • Phishing is an online fraud technique used by criminals to entice you to disclose personal information.
     • Accessing a victim’s account and Gaining access high-value corporate data
       • • Strong security software (firewall, spam filter, anti-virus, anti-spam). • Staff training: awareness of spotting fake websites & emails. • Staff training: never disclose personal or financial information. • Staff training: disable pop-ups.

3. Brute force attack

   • A brute force attack is a trial and error method used by programs to decode encrypted data
     • • Theft of data. • Access to corporate and private computer systems
       • • Network lockout policy: locks out after a number of tries. • Staff training: using effective passwords that contain symbols and numbers. • Challenge response tests e.g. reCAPTCHA – user has to look at a picture and answer a question.

4. Denial of service attack

   • Flooding a server with useless traffic causes servers to become overloaded preventing them responding to legitimate client-server requests from users.
     • • Revenue losses: downtime affects profits. Based on industry surveys, the average cost of downtime is over £4000/minute • Productivity Loss: when critical network systems are shut down, your workforce’s productivity comes to a halt. • Reputation Damage: your brand suffers if customers can’t access your site or become casualties of a data breach.
       • • Strong security software (firewall). • Packet filters on routers. • Configuration of the webserver. • Good network policy: audits, logs, monitoring

5. Data interception and theft

   • An attacker monitors data streams to or from a target, in order to gather sensitive information.
     • • Discovering username and password credentials. • Gaining access to systems. • Disclosure of corporate data. • Theft of data.
       • • Strong encryption. • Using virtual networks. • Staff training: use of passwords, locking and portable storage devices. • Network forensics.

6. SQL injection

   • SQL injection is a code injection technique, used to attack data-driven applications.
     • • Contents of the database can be output, revealing data that otherwise would be hidden. • Data in the database can be amended and deleted. • New rogue records can be added.
       • - Validation of input fields. - Using parameterised queries. - Using database permissions. - Penetration testing.