B1 - Threats to Data R

5 reasons why systems are attacked

• fun / challenge → test skills

• industrial espionage (access other systems for their trade secrets or strategy for competitive advantage)

• personal attack → vengeful

• disruption → to stop them functioning normally

• data / info theft → stealing to sell

8 types of external threats

• hacking

• malware

• denial of service attacks

• phishing

• pharming

• social engineering

• shoulder surfing

• man in the middle attack

what is hacking and how to prevent it

gaining unauthorised access to a system (black hat hacker)

• strong, regularly changed passwords

• software regularly updates

malware (7) and how to prevent it

software with malicious intent

(virus, worm, botnet, rootkit, Trojan, ransomware, spyware)

• operating system updates

• anti malware software

• firewall

denial pf service attacks and how to protect

clooding a website with so many requests that its unable to respond to requests from authorised users

• firewall

• intrusion detection systems

pharming and how to prevent it

redirect traffic for genuine site onto spoof version to get personal information

social engineering and how to prevent it

trick into giving personal info by pretending to be someone trustworthy

phishing how to prevent

spoof email or text to click on link and get details

• dont click on links

shoulder surfing and how to prevnt

watching. thats it. just watch them.

• angled away

• 2fa

man in the middle attacks and how

eavesdropping. intercept unencrypted messages on open wifi and alter data sent and received

• no public wifi

6 internal threats

• unintentional disclosure of data → telling ppl you think u can trust

• intentional stealing / leaking

• users override security controls → writing down pass, allowing unauthorised

• use of portable storage devices

• downloads from internet

• visiting untrustworthy websites

6 impacts of security breach

• data loss

• damage to publiv image

• financial loss

• reduction in productivity

• downtime

• legal action