Please enable JavaScript.

Coggle requires JavaScript to display documents.

1.4 network security - Coggle Diagram

- - - - Malware
        
        Malicious software (malware) is created with the intent to cause damage to computer systems or steal data, and computer users must take steps to lessen these threats. There are many different forms of malware, some of which can be classified as viruses, trojans, and worms based on how they behave. These are explained further in the sections below.
      - Social engineering
        
        Social engineering is the term used for a range of techniques employed by cybercriminals to deceive users into giving away their IDs, passwords, or other personal information. Criminals who are intent on getting access to our data come up with new ways of tricking us every day. Techniques that you may have heard of include phishing, shouldering, blagging, and pharming.
      - Brute-force attacks
        
        This type of attack uses a computer program to generate all combinations of characters until it finds the combination that matches the password.
      - Denial of service attacks
        
        Servers are configured to be able to cope with a certain volume of traffic. In a denial-of-service attack, a server will be bombarded with requests at a level that it cannot cope with. Anyone else who is trying to access the server will find that their request cannot be processed, therefore causing a denial of service.
      - The concept of SQL injection
        
        An SQL injection is a technique used by a malicious person to manipulate an SQL statement to their own benefit.
        SQL stands for Structured Query Language and is a language that is used to form queries to extract or manipulate information in a database. You can find out more about SQL in the SQL topic.
      - Data interception and theft
        
        A man-in-the middle attack describes a specific situation where a hacker hacks the connection between two people or systems and intercepts the data they are passing to each other. The hacker may take the data or may alter it so that the recipient receives data that has been tampered with in some way. The users will be unaware that the data has been intercepted.
- - - - Penetration testing
        
        Penetration testing is testing to make sure that the system is secure from hackers or other malicious attacks. It is used to discover weaknesses or vulnerabilities in a system that could be exploited.
        
        There are two main types of penetration testing:
        
        Black-box penetration testing is designed to mimic an external attack on the system. The testing will assume that the attacker is unauthorised and has no knowledge of the system. The tester will use brute force methods and try to exploit well-known software vulnerabilities to get access to the system.
        
        White-box penetration testing is designed to mimic an attack from an insider who already has access to the system, and maybe has information about the way the system is configured and operates. This can help safeguard against the actions of someone who is inside the organisation and up to no good.
      - Anti-malware software
        
        Anti-malware or antivirus software is used to detect, quarantine, or remove malware such as viruses, trojans, and worms from computers. Anti-malware software can have a real-time checker that scans files before they are used to keep the computer safe, and can also have scheduled scans, which perform checks upon computer files on a regular basis.
      - Firewalls
        
        A firewall sits between two networks, usually a trusted network (such as your home network) and an untrusted network (such as the internet) as illustrated in Figure 1. The firewall will attempt to prevent malicious traffic entering the network. It can also be configured to prevent certain types of data from leaving the network.
      - User access levels
        
        When a user is given access to a computer system, their access to specific files within the system can be restricted. Setting appropriate permissions will help to prevent unauthorised access to sensitive or important data.
      - Passwords
        
        UserIDs and passwords are the most basic form of authentication. When a user attempts to sign in to the system, they will be prompted to enter their userID and password. This information will be checked by the system. If the details are valid, the user will be granted access to the system, otherwise access will be denied.
      - Encryption
        
        Encryption techniques are used to keep data and communications secret from interceptors. Ciphers such as the Caesar cipher have been used for centuries to encrypt and decrypt messages using a shared secret known as a key. Other cipher techniques are asymmetric, which means that the sender and recipient each use different keys to encrypt and decrypt their messages.
      - Physical security
        
        Most large buildings are protected by security mechanisms to control access. This may be in the form of security guards who check that only authorised people can enter the building, or could be in the form of doors or barriers that can only be opened by someone with an appropriate smart card or access code. CCTV is commonly deployed to record movement around the site and inside buildings.