1.4 Network Security
No description yet. This curated deck is ready for daily study.
Card preview (24)
What are networks ?
A group of interconnected computers/devices.
What are the forms of network attacks ?
• Active • Eavesdropping(Passive) • External • Internal
What is an Active network attack ?
attempts to modify or delete data, or to prevent a network from operating correctly
What is an Eavesdropping (Passive) network attack ?
hacker monitors a network in order to gain information
What is an External network attack ?
someone outside of an organisation attempts to hack its network.
What is an Internal network attack ?
someone within an organisation attempts to hack its network.
What is Malware ?
Malware is malicious software that is designed to hack a system.
What is a virus ?
• Programs embedded within other files • replicate themselves and become part of other programs
What are worms ?
• they are not hidden within other files • often spread through emails.
What are Trojans ?
• Programs which act to be legitimate but are malware • cannot spread by themselves
What is spyware ?
• Programs that monitor user activities • send the information back to a hacker.
What is ransomware ?
• Programs that attempt to blackmail a user into making a payment to a hacker • encrypt documents and won’t decrypt them
What is phishing ?
Emails that try to trick users into giving away personal details
What is a brute force attack ?
a program is used to find a password by trying all possible combinations of characters
What is a Denial of Service (DOS) attack ?
Where a computer is used to prevent a server from performing its tasks
What is a data interception and theft attack ?
• Where data is intercepted during transmission -using software called a packet sniffer
What is a SQL injection attack ?
Where SQL code is entered as a data input
What is poor network policy ?
Where a network does not have security rules in place for users to follow.
What are features that poor network policies tend no to have ?
• Levels of access • stopping the connection of external devices • regulation regarding secure passwords • Restriction on websites • Preventing wireless connection/remote access • Formal backup procedure • Maintenance program
What are the methods to keep a network safe ?
• Penetration testing • network forensics • User access levels • secure passwords • encryption • anti-malware software • firewalls
What is penetration testing ?
probing the network for potential weaknesses and attempt to exploit them
What is network forensics ?
• monitoring the traffic on a network -At regular intervals transmitted data packets are copied • stored for later analysis
What are user access levels ?
Determine the facilities a user has access to
What is a secure password ?
• one that is not easy to guess • that requires at least eight characters • at least one uppercase letter • one number • one special character