defend + attack - section a




SECTION A - Defend and Attack

1. Basic Security Risks and Issues to Computer Hardware, Software, and Data

Security risks can be categorized into hardware, software, and data threats:

  • Hardware Risks: Physical damage due to power surges, overheating, or physical theft.

  • Software Risks: Malware infections, software corruption, unauthorized access.

  • Data Risks: Data breaches, unauthorized modification, data loss.

Examples:

  1. Hard drive failures due to overheating.

  2. Malware that encrypts user data (ransomware).

  3. Unauthorized access to systems via weak passwords.

  4. Phishing attacks stealing login credentials.

  5. Man-in-the-middle attacks intercepting sensitive data.

  6. Power surges corrupting hardware.

  7. Accidental deletion of critical files.

  8. Data leaks due to unsecured cloud storage.

  9. Insider threats from employees.

  10. Outdated software vulnerabilities.

2. Virus Types and Symptoms

Common virus types:

  • Trojan Horse: Appears legitimate but has malicious intent.

  • Worms: Self-replicating and spreads through networks.

  • Ransomware: Encrypts user files, demanding payment.

  • Spyware: Steals sensitive data without user knowledge.

  • Adware: Unwanted advertisements slowing system performance.

  • Rootkits: Conceals malware presence.

  • Boot Sector Virus: Infects the startup sector of storage devices.

  • Polymorphic Virus: Changes its code to avoid detection.

  • File Infector Virus: Attaches to executable files.

  • Macro Virus: Targets software macros (e.g., MS Office files).

Symptoms:

  • Slow performance.

  • Frequent crashes.

  • Unexpected pop-ups.

  • Unauthorized system access.

  • Missing or altered files.

3. Phishing, Social Engineering, Spoofing, Identity Theft, and Spamming

  • Phishing: Deceptive emails imitating trusted sources to steal information.

  • Social Engineering: Psychological manipulation to gain access.

  • Spoofing: Imitating legitimate sources (email, IP, website) to deceive users.

  • Identity Theft: Stealing personal data to commit fraud.

  • Spamming: Sending unsolicited bulk messages.

4. Incident Reporting Importance & Process

  • Helps prevent future incidents.

  • Allows for quick response and mitigation.

  • Ensures compliance with security policies.

  • Steps:

    1. Detect and document the security event.

    2. Report to IT/security personnel.

    3. Analyze and classify the incident.

    4. Contain and eradicate threats.

    5. Review and strengthen security policies.

5. Security Preventive Maintenance

  • Install updates: Fix vulnerabilities.

  • Patches: Resolve software bugs.

  • Firewalls: Block unauthorized access.

  • Antivirus: Detect and remove malware.

  • Backup Data: Ensure recovery.

6. Security Threat Diagnosis and Troubleshooting

  • Identify symptoms (slow performance, crashes, unauthorized changes).

  • Check logs for anomalies.

  • Scan for malware.

  • Patch vulnerabilities.

7. Virus Protection & Removal

  • Install/update antivirus.

  • Run full system scans.

  • Remove/quarantine infected files.

  • Restore data from backups.

8. Malware Protection Impact

  • Antivirus: Detects and removes threats.

  • Spam Filters: Blocks phishing emails.

  • Patch Management: Fixes vulnerabilities.

  • Adware/Spyware Filters: Enhances security.

9. Scanning & Disinfection

  • Use antivirus/anti-malware scanners.

  • Disconnect infected devices.

  • Perform deep scans.

  • Reinstall OS if necessary.

10. Anti-X Software Installation & Configuration

  • Antivirus: Scans and removes malware.

  • Anti-spyware: Detects hidden spyware.

  • Anti-spam: Blocks junk emails.

  • Configuration Steps:

    1. Download from a trusted source.

    2. Install with default/recommended settings.

    3. Schedule automatic scans.

    4. Keep definitions updated.

11. Virus Infection Sources & Prevention

  • Sources: Malicious emails, untrusted downloads, USB drives.

  • Prevention:

    • Avoid clicking unknown links.

    • Enable firewalls.

    • Keep software updated.

    • Use strong passwords.

12. Privacy & Personal Security Protection

  • Avoid sharing sensitive information.

  • Use two-factor authentication.

  • Regularly update passwords.

  • Enable encryption for sensitive files.

13. Privacy, Passwords, & Protection Utilities

  • Privacy Software: Clears browsing history, encrypts files.

  • Password Managers: Securely stores credentials.

  • Encryption Tools: Protects sensitive data.

  • Two-Factor Authentication: Adds extra security layer.