System Threats

System Threats

1. Malware

   • software written to infect computers and commit crimes such as fraud and identity theft
     • The computer may crash. Internet connection may become slow. Files may be deleted.
       • Strong security software (firewall, spam filter, anti-virus, anti-spyware, anti-spam) Enable OS update. Staff training: caution opening attachments. Back up files regularly

2. Phishing

   • Phishing is an online fraud technique used by criminals to entice you to disclose personal information such as usernames, passwords and credit card details by disguising as a trustworthy entity in an electronic communication.
     • • Accessing a victim’s account and withdraw money or purchase merchandise or services. • Open new bank or credit-card accounts in a victim’s names, and use the new account to cash illegitimate checks or purchase merchandise. • Gaining access high-value corporate data. • Financial services can blacklist institutions, resulting in reputational damage.
       • • Strong security software (firewall, spam filter, anti-virus, anti-spam). • Staff training: awareness of spotting fake websites & emails. • Staff training: never disclose personal or financial information. • Staff training: disable pop-ups.

3. Brute force attack

   • A brute force attack is a trial and error method used by programs to decode encrypted data such as passwords or Data Encryption Standard (DES) keys, through exhaustive effort rather than employing intellectual strategies.
     • • Theft of data. • Access to corporate and private computer systems.
       • • Network lockout policy: locks out after a number of tries. • Staff training: using effective passwords that contain symbols and numbers. • Challenge response tests e.g. reCAPTCHA – user has to look at a picture and answer a question.

4. Denial of service

   • Flooding a server with useless traffic causes servers to become overloaded preventing them responding to legitimate client-server requests from users.
     • • Revenue losses: downtime affects profits. Based on industry surveys, the average cost of downtime is over £4000/minute • Productivity Loss: when critical network systems are shut down, your workforce’s productivity comes to a halt. • Reputation Damage: your brand suffers if customers can’t access your site or become casualties of a data breach.
       • • Strong security software (firewall). • Packet filters on routers. • Configuration of the webserver. • Good network policy: audits, logs, monitoring.

5. Data interception and theft

   • An attacker monitors data streams to or from a target, in order to gather sensitive information.
     • • Discovering username and password credentials. • Gaining access to systems. • Disclosure of corporate data. • Theft of data.
       • • Strong encryption. • Using virtual networks. • Staff training: use of passwords, locking and portable storage devices. • Network forensics.