1.4 Network Security

A malicious piece of software that infects other files. It can only replicate if the file is opened and run. A virus will replicate and infect other susceptible files, but requires human computer users to spread them from computer to computer.

A complete standalone piece of malicious software that can spread by itself without any human interaction.

A piece of malicious software that tricks users into downloading by making it look like it is something useful.

Any attack on a system that denies you (and others) of a service.

Infecting hundreds or thousands of computers with Trojans that can all be triggered at once to send a flood of IP data packets to a server and overwhelm it and crash

Guessing thousands (or millions or even billions!) of password combinations until they crack the password. This is sometimes called a “dictionary attack” because it goes through all the words of the dictionary first.

emails sent to numerous email addresses in the hope that some of the recipients will fool for the scam.

Any method that hackers use to trick PEOPLE into either downloading malicious software or giving out personal information. Phishing is a form of social engineering.

when a hacker types SQL code into the input box of a form and submits it. The SQL code could allow a hacker to view usernames and passwords stored in a database.

Cyber criminals (hackers) can intercept data as it is travelling across the Internet.

Network policies are rules that users must stick to when using a network (e.g. password length and rules on email use). Poor network policies make a network more vulnerable

when companies pay professional hackers to hack into their systems and find vulnerabilities. Any vulnerabilities (security weaknesses/holes) must be reported by the hacker.

monitoring a network and capturing network traffic (data packets) and alerting the administrator to any issues.

blocks unwanted access to the network from the Internet. Firewalls inspect incoming data packets to see if they are legitimate.

rules and guidelines on what users can and can’t do as well as the software to implement these rules.

Making sure all users have accounts with usernames and passwords.

Making sure users use the network appropriately and for example don’t access personal email accounts that might result in viruses being downloaded.

What happens in the event of a disaster

scans a computer system and alerts to any malware.

scrambling data so that only the intended recipient can understand it. Anyone that tries to steal the data will not be able to read it unless they have a key.

CCTV, Security Guards