U9 - NETWORK SECURITY

HUMAN ERROR HACKING VIRUSES TECHNICAL BREAKDOWNS INTERCEPTION OLD DEVICES PHYSICAL THEFT

Data can be intercepted and altered when sent across a network PACKET SNIFFING is when packets sent across a network are monitored

Old devices can contain data unless FACTORY RESET or SIM REMOVED

Gaining unauthorised access to a computer system White / Grey / Black Hat hacking

Buffer Overflow Too many permissions Parameters in functions with no validation

When a program tries to store more data in a buffer than was intended. Can occur intentionally in a buffer overflow attack Can be combatted by BOUNDS TESTING, ensures data enteredis within acceptable limits

Too many users have access to sensitive files. Constantly reviewing permissions

Malicious code can be embedded within input bars on webpages. This occurs when code is entered into functions with no validation. Vaildation ensures data is as expected.

ACCESS LEVELS PASSWORDS ENCRYPTION (XOR)

Not all users have access to all data Only relevant parties have read/write access to files to minimise security risk

Passwords should be strong Containing various different character types Weak passwords are easier to brute force No birthdays or names

Data should be SCRAMBLED before being sent across a network CYPHERTEXT cannot be understood without an ENCRYPTION KEY XOR encryption - XOR the data with the data key to scramble

FOOTPRINTING PENETRATION TESTING

Checking what information is available about a company and its servers online Helps to remove and identify infromation that can aid hackers exploit there target

A form of ethical hacking A system breach is attempted in order to highlight security flaws This means the vulnerabilties can be removed before a hacker exploits them

SQL INJECTION DoS ATTACK BRUTE FORCE ATTACK IP SPOOFING SOCIAL ENGINEERING

Structured Query Language Malicious code is injected into search bars/ forms to compromise the security of information

Denial of Service Attack Flooding the network with meaningless requests in order to make it crash

Working through all the possible combinations in order to crack a password

Changing the IP of a legitimate website so that if a user types in the address they are taken to a fake webpage where the hacker can steal sensitive information.

Phishing is a form of social engineering Using people as the vulnerability Manipulating people into giving away sensitive information

VIRUSES WORMS TROJANS KEYLOGGERS & SPYWARE

Programs that can REPLICATE themselves abd spread across a system Must attach itself to a HOST FILE

SELF-REPLICATING programs that identify vulnerabilities in the OS Enable REMOTE CONTROL of the infected computer