1.4 – Network security

Malicious software designed to disrupt

Malware that attaches to files/programs

.Malware disguised as legitimate software .Once installed acts as a virus / by example of action e.g. deleting files / allows unauthorised access

Malware that secretly collects user activity data like keystrokes or browsing habits and sends it to attackers

People are often the weakest link in security * Using deception to manipulate users * …to gain personal data

. Fake emails sent to person / click on link from fake email . Person sends personal data / gives away personal data

Automated attack trying many username/password combinations until the correct one is found

. Multiple requests sent to a server (simultaneously) / server is flooded with requests . More requests than the server can process / uses all of the bandwidth available . Server cannot respond / server crashes/denies access / stops access to a network / slows access to a network

.Software that redirects user to fake website / use of a fake website . Person enters personal data / gives away personal data

Capturing data transmitted over a network without permission

Malicious SQL code entered into input fields to gain unauthorised access to databases and data

Attempting to gain unauthorised access to identify vulnerabilities before real attacks occur

Anti-malware . Scans for / identifies virus/spyware/malware . Compares data to a database of malware . Alerts user and requests action such as .. . Quarantines/deletes virus/spyware/malware . Stops the download of virus/spyware/malware

Firewall . Scans incoming and outgoing traffic . Compares traffic to a criteria . Blocks traffic that is unauthorised . Blocks incoming/outgoing traffic

. Scans for / identifies virus/malware . Compares data to a database of viruses/malware . Alerts user and requests action such as .. . Quarantines/deletes virus/spyware . Stops the download of virus/malware

User access levels . Data can be read/write/ read-write / by example . Prevents accidental changes . Limits data users can access

Passwords/biometrics/authentication . code/fingerprint etc. has to be correctly entered to gain access . strong password / letters, numbers, symbols / fingerprint is unique to individual … . harder/impossible for a brute force attack to succeed . lock after set number of failed attempts

Encryption . Scrambles data . …using an algorithm . So if intercepted it cannot be understood . Key needed to decrypt

. Locks . Key-card entry . Biometric entry to room . Passcode entry to room . Alarms . Security guards/team . CCTV

Anti-malware software

Penetration Testing

Firewalls

User access levels

Passwords