1051 – Introduction to Systems Security Threats

A cyber attack is an attempt to gain access to a network without permission with the intention of accessing, changing or destroying information. (unauthorised access)

Some reasons for cyber attacks are:

  • For financial gain – stealing & selling data
  • For a challenge – to see if they can succeed
  • Revenge – a disgruntled employee or ex friend
  • To take out a competitor – by bringing down their website
  • Political motives – to raise awareness of a political issue
  • Idealism – trying to expose an injustice

Security reasons – trying to find flaws in a system, before someone else finds them.

Cyber security is the set of measures taken to protect networks and computer systems from cyber attacks.  

The need for network security:

  • To reduce the risk of data loss
  • To stop someone making unauthorised changes.
  • To stop data theft
  • To keep confidential data safe
  • To abide with common law (Legal Obligations)

 

What is  a passive network attack? What is a active attack?
  • Attacker monitors and intercepts data using packet sniffing software
  • Hard to detect
  • Use of malware (software installed on a device)
  • Easy to detect
Best defence for against passive attack:

  • Data encryption methods
  • WIFI – WPA2 uses the AES (Advanced Encryption Standard)
 Best defence  for against active attack:

  • Firewall to actively Monitor traffic