System Security 1.6

System Security 1.6

1. Threats posed to networks

   • Malware
     • This is software that is specifically designed to gain access or damage a computer without the knowledge of the owner. There are various types of malware including spyware, keyloggers, true viruses, worms, or any type of malicious code that infiltrates a computer.
   • Phishing
     • Phishing is the attempt to obtain sensitive information such as usernames, passwords, and credit card details by disguising as a trustworthy entity in an electronic communication.
   • Social engineering
     • A social engineer runs what used to be called a "con game." Techniques such as appeal to vanity, appeal to authority and appeal to greed are often used in social engineering attacks. Many social engineering exploits simply rely on people's willingness to be helpful. For example, the attacker might pretend to be a co-worker who has some kind of urgent problem that requires access to additional network resources.
   • Brute force attacks
     • A brute force attack is a trial-and-error method used to obtain information such as a user password or personal identification number (PIN). In a brute force attack, automated software is used to generate a large number of consecutive guesses as to the value of the desired data.
   • DDOS
     • A Distributed Denial of Service (DDoS) attack is an attempt to make an online service unavailable by overwhelming it with traffic from multiple sources.
   • Data interception and theft
     • The interception and stealing of packets across a network
   • SQL Injection
     • SQL injection is a type of security exploit in which the attacker adds Structured Query Language (SQL) code to a Web form input box to gain access to resources or make changes to data.
   • Poor network policy

2. Identifying and preventing vulnerabilities

   • Penetration testing
     • Penetration testing (also called pen testing) is the practice of testing a computer system, network or Web application to find vulnerabilities that an attacker could exploit.
   • Network forensics
     • Network forensics is the capture, recording, and analysis of network events in order to discover the source of security attacks or other problem incidents.
   • Network policies
     • A network security policy is a formal document that outlines the principles, procedures and guidelines to enforce, manage, monitor and maintain security on a computer network. It is designed to ensure that the computer network is protected from any act or process that can breach its security.
   • Anti-malware software
     • Anti-malware is a type of software program designed to prevent, detect and get rid of malicious programming on individual computing devices and IT systems.
   • Firewalls
     • A firewall is a network security device that monitors incoming and outgoing network traffic and decides whether to allow or block specific traffic based on a defined set of security rules.
   • User access levels
     • Network managers can set up groups of users with different levels of access to the network. At the highest level, the network manager can install and remove software, access all user areas and change permissions. At lower levels, a group of users may only be able to access particular pieces of software and their files stored in their own areas. Different levels of access help to ensure that the network remains secure and that only licenced software is used on it.
   • Passwords
     • A password is a string of characters used to verify the identity of a user during the authentication process. This prevents anyone but the owner of the device and data on it from accessing and stealing or harming their device or data
   • Encryption
     • Encryption is the process of converting information or data into a code, especially to prevent unauthorized access.