# data[].attributes.body
A computer worm is a standalone malware computer program that replicates itself in order to spread to other computers. In computer networks it is able to identify vulnerable machines to infect they can either contain a payload or not but still affects network traffic

# data[].attributes.body
Examples Spyware, Malware and DoS attacks

# data[].attributes.body
Malware refers to malicious software, which come in a variety of different types, including viruses, worms, and trojans.
Malware can cause damage to computer systems, corrupt or change files, steal data, or cause disruption to services.

# data[].attributes.body
Spyware, a malicious software that is installed on a device without the user’s knowledge. It captures data from the device and sends it back to the creator of the software. Spyware gathers information on a person and how they use their computer; this may include information such as websites visited or applications run.

# data[].attributes.body
A DoS attack (denial of service) is when an attacker prevents valid users from using computer systems, devices, or other network resources.

DoS attacks overwhelm servers, systems, or networks with traffic in order to overpower the victim resources and making it preventing or making it difficult for valid users access them.

# data[].attributes.body
SQL injection is one of the most common web hacking techniques, where a malicious code is implemented in SQL statements, via web page input.

# data[].attributes.body
Examples Insider Trading, Data Theft, Phishing and Pharming

# data[].attributes.body
Data theft is where digital information is illegally obtained from an company/organization for financial benefit or with malicious intent.

# data[].attributes.body
To prevent SQL injection an it administrator could implement input validation or parameterized queries. An it administrator should then also ensure that the application code should never use inputs directly and also make sure all inputs are sanitised

# data[].attributes.body
Telecommunications act (1984) make it illegal to communicate information of an indecent  obscene or menacing character by a public telecommunications system or to misuse or tap a telecommunications system

# data[].attributes.body
Insider trading is where someone who knows private information about a publicly traded company's stock, buys and sells that stock.

# data[].attributes.body
They could implement some policies and procedures in order to make sure that the network is secure. This could include an Acceptable Use policy for the computers, or perhaps how to respond to a cyber security incident in a composed and organized manner

# data[].attributes.body
Applying to information stored both on computers and in organised paper filing systems, this law covers personal data (any data which can be used to identify a living person). Data which can be used in combination with other data to identify a living person is also classified as personal data.

An individual who can be identified by personal data is referred to as the data subject, with the law protecting them in eight specific ways as laid out by the Government:

1. Personal data shall be processed fairly and lawfully
2. Personal data shall be obtained only for one or more specified and lawful purpose
3. Personal data shall be adequate, relevant and not excessive for its purpose(s)
4. Personal data shall be accurate and where necessary kept up to date
5. Personal data shall not be kept for longer than is necessary for its purpose(s)
6. Personal data shall be processed in accordance with the rights of data subjects under this Act
7. Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data
8. Personal data shall not be transferred to a country or territory outside the European Economic Area, unless that country or territory ensures an adequate level of data protection

# data[].attributes.body
https://www.youtube.com/watch?v=ciNHn38EyRc

# data[].attributes.attachment_link.title
Running an SQL Injection Attack - Computerphile

# data[].attributes.body
Biometrics are physical security measures that require a part of your body that is unique to you, i.e face, eye or fingerprint in order to bypass it.

# data[].attributes.headline
The Regulation of Investigatory Powers Act (2000)

# data[].attributes.subject
The Regulation of Investigatory Powers Act (2000)

# data[].attributes.body
The Regulation of Investigatory Powers Act (RIPA) covers the investigation, surveillance and interception of communication by public bodies. The act requires ISPs as well as mobile phone companies reveal information upon request,  from authorities and networks have sufficient hardware to allow surveillance.

# data[].attributes.body
There is also always a risk of environmental threats to your data, such as flooding amongst other natural disasters. To protect against floods, you could keep any devices containing important data on higher floors of the building, or at least keep them off of the floor by putting them on a table for example.

# data[].attributes.body
HIDS and NIDS are both forms of cyber security methods. NIDS (Network Intrusion Detection System) detects possible intrusions across the whole network, whereas HIDS (Host Intrusion Detection System) only detects it on the host device.

# data[].attributes.body
To avoid falling victim to a phishing email, or a trojan horse virus, you should always be alert when receiving suspicious emails. Check for spelling and grammar errors, the general tone of the email, and hover over any links to see if they take you to the website that they say they will

# data[].attributes.body
Phishing is the practice of sending fraudulent messages to users in an attempt to trick them into revealing their personal information, often via e-mail.

Pharming is the practice of using deceptive websites that mimic existing websites to trick users into submitting their information when they try to log in.

# data[].attributes.body
Encryption
Installing Anti-Viruses or Anti-Malwares
Applying Security Settings to Networks
Logging Computers off after use
Preventing Access to Servers
Preventing Password Sharing

# data[].attributes.body
The Computer Misuse Act was drafted to provide a law to govern the way that individuals can lawfully access data on a computer system. It criminalises unauthorised access to data and modification of stored information without the permission of the owner.

The act also illegalises the creation, adaptation, supplying or possession of information or resources to be used for breaking into a computer or impairing its use. This is expanded to cover the alteration, erasure, copying or moving of the computer, its programs or its data.

The first level of punishment under this act is for unauthorised access, and can lead to a £5,000 fine and 2 years of imprisonment.

The second level is applied if the criminal had the intent to steal or damage any information, which can lead to up to 10 years of imprisonment and an unlimited fine.

The third level of punishment applies to people who create or sell tools intended for use in breaking into computers, which can result in 10 years of imprisonment and an unlimited fine - unless the potential damage could be considered to be a threat to human safety or national security, in which case it could be a life sentence.

# data[].attributes.body
If data is being stored on a physical device (e.g. an external hard drive, or possibly a laptop) then you could possibly keep it in a locked room or area in order to protect it from physical threats.

# data[].attributes.body
Firewall is a network security measure preventing unauthorized access to a network Firewalls use techniques such  as packet filtering proxy servers  circuit level gateways or stateful inspection firewall