Cyber Security

Automated or manual attempts to gain unauthorised access to programs or data

Firewall to block access by unauthorised devices

Automated or manual attempts to gain unauthorised access to secure areas by trying all possible password/key combinations

Strong passwords Limited attempts allowed

Data may be intercepted during transmission, but physical theft can occur where storage devices or data files are left insecurely

Encryption Passwords Physical locks

Software that hides on your computer and records your activities to send back to a third-party for analysis

Anti-malware Anti-spyware software

Phishing emails redirect a user to a fake website where they trick the reader into divulging confidential information such as passwords that can be used fraudulently

Network policy Firewall User awareness of phishing ‘clues’

Sends the user to a fake website that looks like the real thing. The user types in a legitimate address and is redirected to a fake website

Checking the URL Making sure the site says HTTPS, not HTTP

Malicious software written to cause inconvenience or damage to programs or data

A program that is installed on a computer without the user’s knowledge or permission with the intent of doing harm. It includes instructions to replicate automatically on a computer

A program that is similar to a virus, except it cannot self-replicate

Software that runs on a computer checking all files for known viruses It must be updated regularly

A program that masquerades as having one legitimate purpose, but it actually has another

A link is spread by email The user is invited to click on a link for an everyday purpose This link then executes a program which gives the controller unauthorised access to the computer

A form of malware that encrypts a victim’s files.

A ransom is demanded from the attacker in return for instructions on how to decrypt the files

A malware that displays onscreen advertisements. It is not always dangerous, but could redirect the browser to an unsafe site

Distributed Denial of Service

A malicious attempt to disrupt the normal traffic of a targeted server with a flood of Internet requests

Multiple interconnected devices in different locations establish a botnet The attacker is then able to direct the attack by sending remote instructions to the bots to send requests to the target’s IP address The server becomes overwhelmed, and genuine requests cannot be handled The server fails or times out