Please enable JavaScript.

Coggle requires JavaScript to display documents.

Cybersecurity threats - Coggle Diagram

- - - - Good passwords
        
        Cannot be found in dictionary
        
        Contain special characters and numbers
        
        Mix of upper and lower case
        
        Don't include personal infomation
      - Should be changed when any breach of security
  - - - Quarantine = separate area of hard drive where virus will be stored until removed
    - - Patches system to block new malware
  - - - Sequence of rules to encrypt and decrypt code
      - Can be
        
        Symmetric
        
        both ends need same key
        
        e.g. Shift Cipher
        
        Encryption Cipher
        
        o En(X) = (X + n) mod 26
        
        Decryption Cipher
        
        o Dn(X) = (X-n) mod 26
        
        Asymmetric
        
        End end uses a different key
    - - Can also be used by criminals
      - Can be decrypted by Criminals with right skill set
    - - Block hackers from being able to read data they gain access too
      - Authentication - end user needs to know the key
      - Integrity
        
        Content can't be changed without key to decrypt
  - - - Acceptable use of network
      - unacceptable use
        
        Consequences
    - - e.g. School
        
        Blocks adult content
        
        Blocks illegal content e.g. drugs and terroism
        
        Blocks hate crime websites
  - - - Using a wireless network analyser, hackers can see all computers on network and change theirs
  - - - Hardware
        
        Build into broadband routers
        
        standalone
      - software
    - - Packet filtering
      - Application gateway filtering
      - Proxy server filtering
  - - - Flaws reported back to the organisation so they can fix them
      - Specialists = ethical hackers
        
        self employed
        
        employed
    - - White box Pen testing
        
        Simulates a malicious insider who has knowledge and basic credentials.
        
        source code and design info provided
        
        interviews with developers
        
        Benefits
        
        Deep and detailed testing
        
        Less testing time
        
        tests quality of code, app design etc.
      - Black box
        
        Uniformed attacker
        
        external
        
        cyber warfare attack
        
        benefits
        
        more realistic
        
        disadvantages
        
        takes longer
        
        some areas of infrastucture might be missed
- - - - Can render files or hardware completely useless
    - - Email attachments
      - USB sticks
      - Free Games
    - - Malware
        
        Compromise security and damage system
      - logic bomb
        
        Executes and does damage when condition is met
      - Virus
        
        Spread when protocol is executes
        
        Interferes with Hardware/software/OS
      - Spyware
        
        e.g. keylogger
        
        collects data from infected computer
        
        websites visted
        
        user logging
        
        financial
        
        passwords
        
        collects information without users knowledge
        
        usually hidden and difficult to detect
        
        Some change computer settings
      - Trojan
        
        Usually appears as something wanted or needed
        
        standalone malicious program designed to give control of PC to another person
      - Worm
        
        Standalone. But can replicate and spread.
        
        Can consume bandwidth
      - Stealth virus
        
        avoids detection by masking itself from applications, redirecting commands around itself.
      - Retrovirus
        
        Malware that attacks or bypasses the antivirus software, can potentially change the virus definition file.
      - File infector
        
        Malware that copies itself into other program files
        
        When infected file is executed, it attempts to infect other files
      - Polymorphic Virus
        
        Changes its form each time its executed, avoiding detection/removal by antivirus
      - Ransomware
        
        a type of malicious software designed to block access to a computer system until a sum of money is paid.
      - Scareware
    - - Hostile or intrusive software
  - - - People are usually the weak point
        
        Human interaction and breaking normal security procedures
        
        Virus writers use social engineering to persuade people to run malware-laden email attachments
        
        Pharming
        
        Malicious code installed in personal computer, server or DNS
        o Records modified, misdirecting user to fraudulent websites without knowledge or consent
        
        Phishers use social engineering to convince people to give them sensitive personal information
        
        Attempting to encourage users to enter confidential data by pretending to be from trustworthy space
        
        username
        
        password
        
        credit card
        
        Email spoofing or instant messages
        
        Fake website
        
        banking
        
        shopping
        
        Scareware hackers use social engineering to frighten people into running software that is useless at best and dangerous at worst.
        
        Weakness causes
        
        trusting nature
        
        Pretend to be a colleagues or tech support to gain access
        
        login details
        
        share data
        
        Appealing to vanity
        
        Blagging
        
        Act of creating or using an inverted scenario to engage a targeted victim in a manner that increases the chance the victim will divulge information
        
        aurthority
        
        greed
        
        eavesdropping
        
        Shouldering
        
        Direct observation
  - - - Unauthorised method of gaining access to system, bypassing normal security methods
- - - - Financial
      - Reputational
    - - Financial loss
      - Intellectual property rights
      - Copywrite and patent laws