1.6 system security

1.6 system security

1. forms of attack

   • Malware
     • includes viruses, worms and trojan horses
       • worms
         • replicate itself in order to spread across a network
           • in order to do this it exploits vulnerabilities in a network
       • torjan horse
         • designed to access a computer by misleading the user of its intent
     • malicious software is designed to cause damage to a network or computer system
       • it attaches itself to files and programs on a computer system
   • phishing
     • designed to acquire sensitive information
     • commonly sent through email
     • telephone phishing
       • direct phone calls that pretend to be an official service
   • brute force
     • trial and error
       • can be used for gaining access to password-based entry systems
     • consists of an attacker entering possible passwords and phrases until one is correct
   • data interception and theft
     • packets that travel over networks can be intercepted
       • if packets are encrypted a key will be needed
     • packets reassembled by using a signature
   • SQL detection
   • social engineering
     • relies on human interaction
     • involves tricking users into breaking normal security procedures
   • DDOS
     • overloading a website with unwanted traffic
     • uses a number of computers over a network of infected machines which send requests to a website which would bring it offline

2. threats posed to networks

   • poor network policy
     • can expose a network to many threats
     • most networks restrict users to what they can and cant do