Please enable JavaScript.

Coggle requires JavaScript to display documents.

1.4 Security - Coggle Diagram

- - - - Program errors may mean that a program 'crashes' in the middle of an operation and data is lost
      - Error in procedure may result in data becoming lost or corrupted
      - Data entry errors can result in erroneous data being held, or data being accidentally deleted
  - - - In a small company, this may just mean that an employee takes a backup tape home with them every evening and swaps it every day for the latest backup
      - In a large company, all transactions may be mirrored onto a second remote computer
      - Backup copies of important data should be stored in a secure location offsite
    - - Holding all the company's data in 'The Cloud' is becoming more and more popular
    - - Data needs to be kept physically secure from intruders
      - Ways of doing this in a large company include:
        
        Issuing all staff with ID badges
        
        Having all visitors to a building sign in on arrival, and have them escorted by the person they have arranged to meet, to the office or meeting place
        
        Keeping sensitive areas locked
      - Physical Security and Biometrics
        
        Locks on Doors
        
        Security Guards
        
        Biometric Security
        
        Retina Scanner
        
        Iris Recognition
        
        Fingerprint Recognition
        
        Voice recognition
- - - - Phishers send out hundreds of thousands of emails that look as though they are from legitimate companies
      - For phishing to be successful, the criminals must get you to click on a link in the email to go to a website.
    - - Greeting
        
        The phishers don't know your name- just your email address, so the greeting is not personalised
      - The sender's email
        
        It is often a variation on a genuine address
      - Forged link
        
        The link looks genuine, but it may not link to the website given. Roll your mouse over it to check
      - Request for personal information
        
        Genuine organisations never do this
      - Sense of urgency
        
        Criminals try to persuade you that something bad will happen if you don't act fast
      - Poor spelling and grammar
    - - Use a SPAM filter to prevent common scams ever reaching your inbox
      - Be suspicious! If you aren't completely certain it's genuine, NEVER click any links or download attachments
  - - - Anti-virus software can also help to protect you from pharming attacks
      - Before entering, for example, a password at the point of payment, check that the http has changed to https, indicating a secure site
      - You can check that once the page is loaded, the URL is spelt correctly and hasn't been redirected to a slightly different spelling
      - Internet Service Providers (ISP's) filter out the bogus redirects as soon as an attack is detected
  - - - Record your keystrokes and send them to the attacker
      - Provide someone else with access to your files
      - Use your computer to send spam to everyone in your address book
  - - - Flood the victim's site with spam emails (an 'email bomb')
      - Disrupt access to a victim's website or entire geographical area by reconfiguring software to crash network sites
- - - - Public Key (Asymmetric Encryption)
        
        Two keys are used - one to encrypt and the other to decrypt data
        
        This is more secure as it means that you never have to send or reveal your decryption key
      - Private Key (Symmetric Encryption)
        
        A single key is used to encrypt and decrypt a message and must be given to the recipient of your message to decrypt the data