Topic 8- security and ethics

illegally gaining access to a computer system

hacking

• Curiosity • Financial Gain • Malicious • Hacktivism • Military

Hack

Changing a program’s source code to be used for another use (illegal)

Cracking

Software which tracks keylogs and through this can find out passwords.

Spyware

Antispyware

Spyware

• User clicks on a link from an email or website • When clicked spyware is downloaded • Monitors users activity and relays it back to author • Keypresses can be analysed to find passwords • Common key logs allow password to be found

• Program that replicates itself • Deletes or corrupts files • Ransomware a new form of virus

• Fake email sent that looks legitimate • User clicks on link in the email • User redirected to fake website • Often used to try and steal financial details • How to avoid – Don’t click on links from unknown emails

• Malicious code stored on a computer • Redirects user to fake website to steal users data • How to avoid – check the URL is as expected

• Message given to browser by webserver • Stored in a text file • Stores detail about users preferences on a website • Message sent back to server each time that page is requested

• Enable logon information to be kept • Provide customized pages for the user • Enable target adverts • Enable one-click purchasing with shopping carts • Be able to distinguish between new and repeat visitors

• Accidental Deletion • Malicious – virus • Hardware failure • Software failure • Natural disaster

• Set data to read only • Use correct shut down procedures • Use correct procedures when removing portable storage devices • Backup

• Prevents unauthorized access • Acts as a filter for incoming/outgoing data • Checks data meets criteria • Logs incoming and outgoing traffic • Blocks access to specified IP addresses

• Compares virus signature against a database of known virus signatures • Removes any viruses

• Keeps user IP address secret • Prevents direct access to a web server • Filters traffic

• Voice recognition • Facial Recognition • Thumbprint

• Text passwords easier to hack than biometrics - Biometric passwords are unique and can’t be shared

• Encryption - SSL