1.4 - Network Security

Controlling a database via user input A SQL injection is when a malicious SQL query (command) is entered into a data input box on a website. If the website is insecure then the SQL query can trick the website into giving unauthorised access to the website’s database.

Tricking humans into revealing personal data

Is an attack in which every possible password combination is tested in order from start to finish.

Long passwords and a limit on attempts

A computer repeatedly sending requests to a server causing the system to slow or crash

A coordinated attack using a botnet of infected systems to overload a server with requests

A harmful program seeking to damage or gain unauthorised access to a computer system

Self-replicating malware that attaches itself to infected files

Self-replicating malware that finds weaknesses in software

A harmful program that looks like legitimate software so users are tricked into installing it to get backdoor access to a system

Secretly records the activities of a user to look for usernames, passwords and credit card information

Secretly records the key presses of a user to record usernames, passwords and credit card information

Locks files using encryption so a user can’t access them and demands money from the victim to decrypt the data

Data packets are intercepted by a third party and copied to a different location

Simulating an attack to find weaknesses

Checks packets and blocks packets if they don’t meet a rule

The protection of data from physical actions. e.g. CCTV, locks, security staff, etc.

A software program which scans for known malware and removes it

Permissions an individual has when dealing with a computer system or network e.g. Who can read and/or write to what file

Converting plain text into cypher text using an encryption key so that it cannot be easily understood if stolen