U9 - NETWORK SECURITY Flashcards
(34 cards)
RISKS TO DATA
HUMAN ERROR
HACKING
VIRUSES
TECHNICAL BREAKDOWNS
INTERCEPTION
OLD DEVICES
PHYSICAL THEFT
INTERCEPTION
Data can be intercepted and altered when sent across a network
PACKET SNIFFING is when packets sent across a network are monitored
DISCARDED COMPONENTS
Old devices can contain data unless FACTORY RESET or SIM REMOVED
HACKING
Gaining unauthorised access to a computer system
White / Grey / Black Hat hacking
THREE WAYS OF BEING SECURE BY DESIGN
Buffer Overflow
Too many permissions
Parameters in functions with no validation
BUFFER OVERFLOW
When a program tries to store more data in a buffer than was intended.
Can occur intentionally in a buffer overflow attack
Can be combatted by BOUNDS TESTING, ensures data enteredis within acceptable limits
TOO MANY PERMISSIONS
Too many users have access to sensitive files. Constantly reviewing permissions
PARAMETERS IN FUNCTIONS WITH NO VALIDATION
Malicious code can be embedded within input bars on webpages.
This occurs when code is entered into functions with no validation.
Vaildation ensures data is as expected.
NAME THE THREE WAYS OF PROTECTING DATA
ACCESS LEVELS
PASSWORDS
ENCRYPTION (XOR)
ACCESS LEVELS
Not all users have access to all data
Only relevant parties have read/write access to files to minimise security risk
PASSWORDS
Passwords should be strong
Containing various different character types
Weak passwords are easier to brute force
No birthdays or names
ENCRYPTION
Data should be SCRAMBLED before being sent across a network
CYPHERTEXT cannot be understood without an ENCRYPTION KEY
XOR encryption - XOR the data with the data key to scramble
TWO WAYS TO IDENTIFY VULNERABILITIES
FOOTPRINTING
PENETRATION TESTING
FOOTPRINTING
Checking what information is available about a company and its servers online
Helps to remove and identify infromation that can aid hackers exploit there target
PENETRATION TESTING
A form of ethical hacking
A system breach is attempted in order to highlight security flaws
This means the vulnerabilties can be removed before a hacker exploits them
NAME 5 FORMS OF CYBER ATTACK
SQL INJECTION
DoS ATTACK
BRUTE FORCE ATTACK
IP SPOOFING
SOCIAL ENGINEERING
SQL INJECTION
Structured Query Language
Malicious code is injected into search bars/ forms to compromise the security of information
DoS ATTACK
Denial of Service Attack
Flooding the network with meaningless requests in order to make it crash
BRUTE FORCE ATTACK
Working through all the possible combinations in order to crack a password
IP SPOOFING
Changing the IP of a legitimate website so that if a user types in the address they are taken to a fake webpage where the hacker can steal sensitive information.
SOCIAL ENGINEERING
Phishing is a form of social engineering
Using people as the vulnerability
Manipulating people into giving away sensitive information
NAME 4 TYPES OF MALWARE
VIRUSES
WORMS
TROJANS
KEYLOGGERS & SPYWARE
VIRUSES
Programs that can REPLICATE themselves abd spread across a system
Must attach itself to a HOST FILE
WORMS
SELF-REPLICATING programs that identify vulnerabilities in the OS
Enable REMOTE CONTROL of the infected computer
