1.3.3c, 1.3.3d and 1.3.3e networks

• malicious software written to cause damage/harm to computer or devices on network

• viruses • worms • trojan horse

• delete / modify files • scareware • locking / corrupting files • opening backdoors (holes in someone’s security which can be used for future attacks)

• malicious software designed to cause harm to network by attaching themselves to programs or file on computer or server • often spread through attachments to emails but also spread through files, programs or games downloaded from web page

• delete / corrupt data • change system files so they become corrupted • can fill hard drive so computer runs slower / becomes unresponsive

• replicates itself in order to spread to other computers which uses up a computer’s resource’s and causes other programs to run slowly

• replicates itself to spread and can also spread across network, consuming network bandwidth

• don’t need to be hosted in a program. they can create back doors so a hacker can take over infected computer

• looks like legitimate software and creates backdoors + slows computer down • program that can be downloaded and installed on computer that appears harmless but is actually malicious

• malware that covertly / secretly aims to collect information about a user’s computer activities by transmitting data from their device

• cookies • keystrokes • credit card numbers • passwords • downloads • visited web pages • email addresses • internet surfing habits

• type of spyware • secretly collects / monitors activity of computer system and send data elsewhere without victim knowing

• software that encrypts all files and then demands victim for payment to decrypt them • no pay = key deleted

• software that causes popups or windows that won’t close

• alter permissions giving hackers administrator level access to devices

• collection of computers infected with malware and controlled by hackers

• intercepting a devices connection to internet achieved by luring users into fake Wi-Fi hotspot • operators of fake Wi-Fi hotspot then packet sniff to gain personal info that could be used in further attacks

• attackers prevent user from accessing a network or website by flooding servers with traffic • this makes the network extremely slow (takes up bandwidth) and so they cant respond to legitimate client requests (inaccessible to intended users on network)

• exploit limitation of TCP/IP stack

• web servers of high-profile organisations

• multiple systems orchestrate a synchronised DOS attack against a single target • uses a larger number of compromised machines that have been infected with malware (botnets formed from these “zombie” computers)

• protection services available which can intercept and analyse potential threats (resource requested and visitors IP address)

• proxy server IP addresses as these IP addresses mask the real identity of the real device(s) so are likely malicious packets

• attack uses SQL code on website to query a database attached to website to try and retrieve personal sensitive info • they use certain characters to form query that is executed by the server which could return all sensitive info to attack data-driven applications