Network Security (1.4)

• monitoring data across network and intercepting any sensitive information they find (through the use of network monitoring hardware and software)

• Attacking a network with malware or other planned attacks

• an insider who exploits their network to steal/expose information

• Trying to gain access by using many password combinations (using automated software)

• Stopping users from accessing part of a network by flooding the network with many requests

• malicious software which causes damage (e.g. Editing/deleting files) when it is run

• luring people into giving personal data through email/SMS messages sent from source that looks legitimate

• redirects network traffic to a fake website which is intended to collect persona;/sensitive data

• the art of manipulating people into giving up their personal/sensitive data

• data sent to another device is intercepted by a 3rd party (unauthorised user)

• inserting malicious SQL statements into a database to edit/steal personal data

• limited/no security rules to follow so easier for unauthorised users to gain access to data (e.g. no access rights, no back up of data etc)

• passwords that do not consist of upper/lower case characters, minimum length requirement, symbols and are not updated regularly

• software prone/not protected from the latest threats and malware

• prevents access to files and data unless a ransom is paid to the hacker/3rd party

• testing the vulnerability of a network by paying authorised users (internal or external) to try and find weaknesses to exploit, and then fixing these to improve network security.

• having physical restrictions, such as ID cards, locks and keys to ensure sensitive data cannot be leaked/stolen

• having thorough sets of rules in place to reduce the chances of employees giving accidental or deliberate access to data

• downloading an active program which protects data from malware by blocking malware from entering a system/network or finding and deleting/quarantining the malware to reduce impact

• monitors incoming and outgoing network traffic to protect against unauthorised connections to/from the internet

• granting different levels of access based on role in company to prevent access to sensitive/personal data

• string of characters used to verify the identity of a person trying to gain access to a system/data (preventing unauthorised access)

• using algorithms to change the form of data sent across a network to make it difficult for unauthorised users to access or recognise, and can only access using the encryption key