Topic 4 Network security (1.4-1.5)

• malware • social engineering • brute-force attacks • denial of service attacks • data interception and theft • SQL injection

Malicious code (malware) is an umbrella term used to refer to a variety of forms of hostile or intrusive software (in order to gain access) including: * computer virus * trojan * software

malware that attaches itself to a legitimate program and spreads when the infected file is opened

malware that disguises itself as legitimate software, once installed they can allow hackers to control the system

malware that secretly gathers information about a user’s activity (keystrokes, login details, browsing habits)

• manipulating people • so they give up confidential information (people are the “weak point” of secure systems). For example phishing

• fraudulently obtaining private email • often using email or SMS (eg. a communcation from a ‘bank’ asking for login details)

• a method where an attacker tries many different combinations of usernames/passwords until the correct one is found • in order to break into user accounts/systems

• attack used to overwhelm a website or online service with excessive traffic (sending lots of requests) • this makes it slow or inaccessible to real users

• when data being transmitted over a network is captured without permission (often done on unsecured networks) • this is used to steal sensitive data (that is unencypted) such as login details or credit card numbers

• where SQL code is entered inbto a website’s input fields such as a login/search box, if the code is not properly checked, the malicious code is run by the database • this gains access and control over the database

• penetration testing • anti-malware software • firewalls • user access levels • passwords • encryption • physical security

attempting to gain access to resources without knowledge of usernames/paswords or any normal means of access

• helps prevent the downloading of malware and deletes malware on a system • prevents: malware attacks (viruses, trojans, spyware)

software that scans for known malware, when it is found on a user’s system they are alerted and it requests them to delete the malware if it is identified while it is being downloaded it will be stopped

• it helps test the effectiveness of security measures and finds any vulnerabilities/weaknesses • prevents: SQL injection, brute-force attacks, data interception

scans incoming and outgoing traffic comparing it to a criteria, blocking it based on a set of security rules

• blocks traffic from suspicious IP addresses or stops certain types of data from entering a network • prevents: denial of service attacks, malware from the internet

used to control what data and features different users can access within a system

• prevents misuse of data or accidental changes by ensuring specfic access • prevents: insider threats (malware), misuse of data, damage from compromised low-level accounts

used to protect user accounts and systems by ensuring only authorised users can log in

• makes it so only the user with correct information can have access to a system • prevents: brute-force attacks, unauthorised access to accounts or systems

converting data into a coded format so only authorised users with the correct decryption key can understand it

• reduces the risk of information being read or leaked by hackers • prevents: data interception and theft, theft of devices