SLR 1.4 network security

trojan horse

malware disguised as a program the user wants or needs

worm

standalone malware computer program that replicates itself in order to spread to other computers

Spyware

collects personal information about users without their consent

ransomware

malware which takes control of a computer system and denies the user access until they pay a ransom

rootkit

malware which allows an attacker to remotely take control of a computer system without being detected

virus

malware which aims to make a computer system unreliable. self replicates to spread and must attach to an existing program

bot

allows an attacker to take control of a computer system

bug

An error in a program which causes unwanted results

adware

malware which displays ads eg. intrusive popups
may contain other malware

malware definition

software written to infect computers and commit crimes

impacts of a malware attack

-files can be deletes or encrypted
-computers can crash and reboot spontaneously
-internet connections can slow (as a worm searches online for computers to infect)

prevention measures for malware

-dont open sus links in emails
-dont download sus files
-download + maintain anti-malware

Phishing definition

an attacker disguises themselves as a trustworthy source to get victims to give away personal information using fake emails/websites

how to recognize a phishing email

-check for spelling errors
-check for grammar errors
-check for generic greeting(eg. hello user)

impacts of a phishing attack

-attacker can withdraw money/purchase things
-attacker can open bank accounts, credit cards and cash illegitimate cheques
-attacker can gain access to corporate data
-financial services can blacklist the company (damaged rep)

brute force attack

when an attacker uses a trial and error method to decode encrypted data

how to tell if a website is protected against a brute force attack

-has a captcha
-denies access after several incorrect tries

what is a dictionary attack

a method of breaking into a password protected computer/ network by entering every word in a dictionary

denial of service attack

when a hacker purposely floods a website/network with network traffic to make it unavailable to users

how to protect against DoS attacks

-increase bandwidth
-move to cloud
-put data centers on different networks/in different physical locations

impacts of a DoS attacks

-loss of revenue
-no access to a service
-lower productivity
-damage to rep

what is a zombie computer

an infected computer which a hacker uses to spread a virus

what is a DDoS attack

when a hacker floods a network/server with network traffic to make it unavailable to users but the computers used to make the requests are distributed throughout the world

Data interception and theft

when an attacker moniters data streams to and from a target to gather sensitive information

sniffing

monitoring traffic on a network to pick out unencrypted passwords and logins

How to protect against data interception and theft

-have strong password protection
-encrypt data
-be cautious with employees using personal devices
-properly dispose of sensitive data

common mistakes people make

-not installing OS updates
-not maintaining anti-malware
-not logging off
-sharing passwords
-losing devices
-not encrypting data

SQL Injection

a code injection technique where code is entered into text boxes and then executed by the server

why may a hacker use an SQL injection

-to reveal private data
-to change/delete data
-to add fake records to a database

user access levels

define what information the different users on your account can access and edit

encryption

when data is converted into cypher text using a master key so that it cannot be understood

firewalls

provide protection against outside cyber attackers by sheilding your computer/network from malicious or unnecessary network traffic

Anti-malware software

software designed to locate and destroy malware

Password Security

a word phrase or string of characters used to differentiate an authorized user

physical security

installing cameras, alarms, door locks, fences and security guards

penetration testing

intentionally launching cyber attacks to look for vulnerabilities in computer systems and networks

common prevention methods to forms of attack

-anti-malware
-password security
-physical security
-penetration testing
-user access levels
-encryption
-firewalls

protecting against malware

-OS and security software updates
-firewalls
-anti malware
-staff training

protecting against phishing

-staff training
-strong security software (eg. firewalls)

protecting against a brute force attack

-network lockout policy
-captchas
-progressive delays
-staff training

protecting against SQL

-validation on input boxes
-penetration testing