System Threats

System Threats

Malware
1. It's used for many different reasons which include:
  1. Disrupting computer systems
  2. Gaining sensitive info
  3. Gaining access to private systems
  4. Displaying unwanted adverts
  5. Methods
    1. Viruses
    2. Worms
    3. Scareware
    4. Trojan horses
    5. Spybots
  6. Prevention
    1. Installing anti-virus software
    2. Always updating systems whenever possible
    3. Think before clicking
    4. Always backing up files
2. Malicious software is used to gain access to and damage computers without consent
3. Effects
  1. Computer crashing or slowing down
  2. Files may be deleted, stolen, corrupted, encrypted or changed
  3. They may record your keystrokes to gain passwords, bank info, usernames etc
Phishing
1. How is it done?
  1. Usually an email or message will be sent to the victim
    1. It will either ask for money or link you to a fake website that looks real
      1. The victim then enters their info on this website into the hands of the online criminals
  2. What is gained?
    1. Bank details
    2. Usernames
      1. Passwords
  3. Preventions
    1. Learn the signs that an email or website is fishy
      1. Promote gifts, similar business logos, real name of employees, spelling mistakes in the email etc.
    2. Safe websites begin with https:// and have a closed lock icon so only enter info on these sites
    3. Strong protection
    4. Disable pop-ups
2. What is it?
  1. Phishing is the attempt to gain sensitive information from peoplethrough email/instant messenger
Brute force attack
1. What is it?
  1. It's when an attacker tries many passwords in the hope of guessing correctly with one
2. How does it work?
  1. It works by calculating every possible combination that could make up a passwords length
3. Prevention
  1. Longer passwords can take decades to crack whereas short passwords can be discovered quickly
    1. So create a long password with a mix of characters and numbers
  2. Don't use dictionary words or slightly modified words as it is easy to guess
  3. Locking accounts after failed guess attempts but this has its own problems
  4. Captcha
4. What do they gain?
  1. Theft of data
  2. Access to private systems
Denial of service attack
1. What is it?
  1. It's an attack launched on a network or website
  2. DOS attacks are different, some can be relatively harmeless whilst others are infected with trojans
2. How?
  1. Cyber criminals flood the target with useless requests or log in requests
    1. This grinds the system to a halt
  2. Malware can be used to control many computers to launch this attack ('zombies') which all send requests at the same time
3. Why and what is gained?
  1. Extortion - Attackers can demand money to stop the attack (although success rate is low)
  2. Sometimes people who DOS are hired to launch an attack on a rival company
  3. To show their disapproval to a game, or the government, for example
  4. To distract a network/company to perform other attacks
  5. Results in a the compan/network losing reputation, time and money
4. Prevention
  1. There isn't really a way to prevent an attack but making a plan if it happens,
    1. constantly patching up vulnerabilities,
      1. and having a strong firewall are ways to minimise damage
  2. Packet filters on roters
SQL Injection
1. What is it?
  1. SQL's a programming language and a hacker uses it to target a database or website form
2. How?
  1. When the form asks for input, an SQL statement is entered which runs and allows the user...
    1. ...to control or change data in the database
3. Prevention
  1. Lock down database servers and remove backdoors
  2. Change default admin passwords
  3. Prevention testing
4. Effects
  1. Revealing data that's hidden
  2. Data is controlled,stolen or changed
Data interception
1. What is it?
  1. When a hacker intercepts data packets when they are being sent without the user knowing
2. How?
  1. A hacker uses data packet analysers to intercept data packets when they are sent from a computer
3. Why, what do they gain?
  1. Hackers gain things such as logins,passwords,credit cand numbers and PIN's
4. Prevention
  1. Using data encrypting techniques so the hacker will get useless info

Nächster

Beschreibung

Zusammenfassung der Ressource

ähnlicher Inhalt

	Erstellt von Jasmine Farmand vor mehr als 7 Jahre