System Security

System Security

1. Denial of Service Attack

   • Denial of Service attacks is when flooding a server with unwanted trafficwhich casues servers to become overloaded preventing them from responding to legitmate client server requests from users
     • DDos is a type of attack where multiple compromised systems, which are often infected with a Trojan, are used to target a single system causing a Denial of Service attack.
       • The effects are revenue losses-the dowbntime affects have an average cost of over £4000 per minute. Productivity loss is another effect as your critical network systems shut down so your work stops. Therefore reputation damage is caused as your customers can't access your site so there are casualties for the businesses
         • Preventing denial of service attacks: Strong security software (firewall), Packet filters on routers, Configuration of the webserver, Good network policy: audits, logs, monitoring.

2. Malware

   • software that is written to infect computers-if you web surfing, gaming, banking, online shopping without great protection, you are especially at great risk of this attack
     • The preventions of malware are UPDATED anti-virus systems, anti-spam, and anti-spyware systems. Also you can teach your users to be careful with opening attachments and to back up your files regularly
     • Trojan Horse: By exploiting operating systems and browsers malware can sneak trojan horses to users that think they are a game or music player. It then downloads a Trojan
     • The effects of maklware are that the computer may crash or rebot extra slowly. Also it will damage your internet connection but the most worse effect is that it can key log your computer to hijack and find out your passwords and details for various acounts

3. Phishing

   • It is an online fraud technique to find out crucial details about the user- they can be from an email or trusted websites that will lure you in to a link to enter your details eg:your bank account details
     • The effects are accessing a victims accounts to for instance to withdraw money from their bank account. Also if a company has become victim they will go on the blacklist along with the idea that rival companies can get access to new products if thye have become victim
       • The preventations are strong security software( eg:anti-spam, anti virus, and firewall) and the most effecting preventation technique however is the staff training-awareness of spotting fake websites and emails and to disable pop-ups

4. Brute Force Attack

   • It is a trial and error way of trying to get important details of the victim they target- they use exhausted effort
     • The effects are theft of data and access to corprative and private computer systems
       • The preventations are to have a network lockout policy so it will lock you out after a set number of password guesses. Staff training will make an effective difference because they will learn to have non repetitive passwords that will contain long symbols that will vary in numbers and letters. Also having reCAPTCHA will provide a halt to any piece of software written for a brute force attack

5. SQL injection SQL injection is a code injection technique, used to attack data-driven applications. If a database application has not been coded in a secure way, code can be entered into text boxes, and will be executed by the server.

   • Effects of SQL injection • Contents of the database can be output, revealing data that otherwise would be hidden. • Data in the database can be amended and deleted. • New rogue records can be added.
     • Preventing SQL injection - Validation of input fields. - Using parameterised queries. - Using database permissions. - Penetration testing.

6. Data interception and theft An attacker monitors data streams to or from a target, in order to gather sensitive information. This attack usually involves sniffing network traffic. Sniffing or eavesdropping is the act of monitoring traffic on the network for data such as plaintext passwords or configuration information. With a simple packet sniffer program, an attacker can easily read all plaintext traffic.