System Security 1.6

System Security 1.6

1. Forms Of Attack

   • Malware
     • Types of Malware: 'Trojans', Worms, Viruses and other malicious programs
     • viruses
       • designed to cause harm to a network or computer system
       • attaches itself to programs or files on a computer or server
       • affects all components of an operating system
       • around 82,000 viruses made each day
     • worms
       • replicates itself in order to spread to other computers
       • uses a computer network
       • exploits vulnerabilities across the computer network
       • does not need to attach to the program
     • trojan horses
       • malicious computer program
       • Designed to access a computer by misleading users of its intent
   • Phishing
     • Online fraud technique used to entice people to disclose personal information
     • Used to try and steal personal information such as usernames, passwords credit card details etc.
     • One way is by spamming people messages which have been seen to have come from a trustworthy company to trick people into giving away information
   • Brute Force
     • A trial and error method used by programs to decode encrypted data such as passwords and pin numbers etc.
     • Normally done through exhausted effort with a lot of generated guesses instead of employing forms of intellect
   • Denial of Service
     • Floods a sever with useless traffic, overloading it so it cannot respond to legitimate requests by the user
     • Some forms of DoS attacks (Teardrop Attacks, Ping of Death) exploit limitations in the TCP/IP (Transmission Control Protocol/Internet Protocol)
     • DDoS (Distributed DoS) is where multiple systems, already infected with 'Trojans', are used to infect a singular system; this causes a DDoS to occur
   • Data Interception and Theft
     • The unauthorised act of stealing and obtaining confidential information and compromising privacy in computer systems
     • Data streams and packets are 'eavesdropped' into in order to obtain plain text passwords, configuration information or data itself

2. Threats Posed to Networks

   • Files are deleted, become corrupt or encrypted, Computers crash, refresh spontaneously and slow down, Internet connections become slow
   • Accessing the victim's account to withdraw money or purchase items, Opens bank accounts, credit cars and illegitimate cheques, Can gain access to corporate data, Finacial services can blacklist the company, resulting in damage to brand reputation
   • Theft of data, Access to corporate systems
   • Lots of access to a server of customers, Lost revenue, Lower productivity, Damage to reputation
   • Usernames and passwords compromised, allowing unauthorised access to systems, Disclosure of corporate data
   • Contents of databases can be outputted, revealing private data, Data in the database can be amended or deleted,, New rogue records can be added into the database

3. Identifying and Preventing Vulnerabilities

   • Strong Security Software (Firewall, Spam Filter etc.), Enabling OS and security software updates, Train staff into the possible dangers, Frequently back up files onto removable media
   • Strong Security Software, Heavy Staff Training (Awareness of fake emails, not disclosing personal information, disabling browser pop-ups)
   • Network lockout policy: Locks account after 3 attempts, Using progressive delays, Staff Training (using effective passwords with numbers and symbols etc.), Using challenger response e.g. I am not a bot and reCAPTCHA
   • Strong Firewall, Packet Filters on routers, Configuring (ordering) the web server, Good network policy
   • Encryption, Using virtual networks, Staff Training (Use of Passwords, Locking Computers, Logging off, Use of portable media), Network Forensics
   • Validation on Input Boxes, Using Parameter Queries, Setting Database Permissions, Penetration Testing