Network Security & Threats by Sam Chilton https://padlet.com/2178455/dm2rolywdw2t83s2 . en-us 2023-01-18 11:02:03 UTC 2023-01-18 12:04:26 UTC hello@padlet.com Security Measures https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448177435 Encryption
Installing Anti-Viruses or Anti-Malwares
Applying Security Settings to Networks
Logging Computers off after use
Preventing Access to Servers
Preventing Password Sharing]]> 2023-01-18 11:09:33 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448177435 External Threats https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448179366 Examples Spyware, Malware and DoS attacks]]> 2023-01-18 11:10:36 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448179366 Biometrics https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448179451 Biometrics are physical security measures that require a part of your body that is unique to you, i.e face, eye or fingerprint in order to bypass it.]]> 2023-01-18 11:10:42 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448179451 Internal Threats https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448180479 Examples Insider Trading, Data Theft, Phishing and Pharming]]> 2023-01-18 11:11:50 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448180479 HIDS and NIDS https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448181182 HIDS and NIDS are both forms of cyber security methods. NIDS (Network Intrusion Detection System) detects possible intrusions across the whole network, whereas HIDS (Host Intrusion Detection System) only detects it on the host device.]]> 2023-01-18 11:12:36 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448181182 SQL Injection https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448183019
SQL injection is one of the most common web hacking techniques, where a malicious code is implemented in SQL statements, via web page input.

]]> 2023-01-18 11:14:29 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448183019 Firewall https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448184651 Firewall is a network security measure preventing unauthorized access to a network Firewalls use techniques such  as packet filtering proxy servers  circuit level gateways or stateful inspection firewall  

]]> 2023-01-18 11:16:12 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448184651 Physical Methods https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448186627 If data is being stored on a physical device (e.g. an external hard drive, or possibly a laptop) then you could possibly keep it in a locked room or area in order to protect it from physical threats.]]> 2023-01-18 11:18:27 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448186627 Phishing and Pharming 2178455 https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448186685 Phishing is the practice of sending fraudulent messages to users in an attempt to trick them into revealing their personal information, often via e-mail.

Pharming is the practice of using deceptive websites that mimic existing websites to trick users into submitting their information when they try to log in.]]> 2023-01-18 11:18:31 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448186685 Being Wary https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448191276 To avoid falling victim to a phishing email, or a trojan horse virus, you should always be alert when receiving suspicious emails. Check for spelling and grammar errors, the general tone of the email, and hover over any links to see if they take you to the website that they say they will]]> 2023-01-18 11:23:35 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448191276 Insider Trading https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448191293 Insider trading is where someone who knows private information about a publicly traded company's stock, buys and sells that stock.

]]> 2023-01-18 11:23:36 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448191293 Data Theft https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448194758 Data theft is where digital information is illegally obtained from an company/organization for financial benefit or with malicious intent.]]> 2023-01-18 11:27:16 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448194758 The Computer Misuse Act (1990) 2178455 https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448196953 The Computer Misuse Act was drafted to provide a law to govern the way that individuals can lawfully access data on a computer system. It criminalises unauthorised access to data and modification of stored information without the permission of the owner.

The act also illegalises the creation, adaptation, supplying or possession of information or resources to be used for breaking into a computer or impairing its use. This is expanded to cover the alteration, erasure, copying or moving of the computer, its programs or its data.

The first level of punishment under this act is for unauthorised access, and can lead to a £5,000 fine and 2 years of imprisonment.

The second level is applied if the criminal had the intent to steal or damage any information, which can lead to up to 10 years of imprisonment and an unlimited fine.

The third level of punishment applies to people who create or sell tools intended for use in breaking into computers, which can result in 10 years of imprisonment and an unlimited fine - unless the potential damage could be considered to be a threat to human safety or national security, in which case it could be a life sentence.
]]> 2023-01-18 11:29:39 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448196953 Environmental Threats https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448197178 There is also always a risk of environmental threats to your data, such as flooding amongst other natural disasters. To protect against floods, you could keep any devices containing important data on higher floors of the building, or at least keep them off of the floor by putting them on a table for example.]]> 2023-01-18 11:29:54 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448197178 The Regulation of Investigatory Powers Act (2000) https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448201783 The Regulation of Investigatory Powers Act (RIPA) covers the investigation, surveillance and interception of communication by public bodies. The act requires ISPs as well as mobile phone companies reveal information upon request,  from authorities and networks have sufficient hardware to allow surveillance. ]]> 2023-01-18 11:33:52 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448201783 https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448202733 https://www.youtube.com/watch?v=ciNHn38EyRc]]> 2023-01-18 11:34:52 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448202733 The Data Protection Act (1998) https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448207671 Applying to information stored both on computers and in organised paper filing systems, this law covers personal data (any data which can be used to identify a living person). Data which can be used in combination with other data to identify a living person is also classified as personal data.

An individual who can be identified by personal data is referred to as the data subject, with the law protecting them in eight specific ways as laid out by the Government: 

1. Personal data shall be processed fairly and lawfully 
2. Personal data shall be obtained only for one or more specified and lawful purpose 
3. Personal data shall be adequate, relevant and not excessive for its purpose(s) 
4. Personal data shall be accurate and where necessary kept up to date 
5. Personal data shall not be kept for longer than is necessary for its purpose(s)
6. Personal data shall be processed in accordance with the rights of data subjects under this Act 
7. Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data 
8. Personal data shall not be transferred to a country or territory outside the European Economic Area, unless that country or territory ensures an adequate level of data protection ]]> 2023-01-18 11:39:58 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448207671 IT Administrator https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448207809 They could implement some policies and procedures in order to make sure that the network is secure. This could include an Acceptable Use policy for the computers, or perhaps how to respond to a cyber security incident in a composed and organized manner]]> 2023-01-18 11:40:09 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448207809 Telecommunications act https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448208229 Telecommunications act (1984) make it illegal to communicate information of an indecent  obscene or menacing character by a public telecommunications system or to misuse or tap a telecommunications system

]]> 2023-01-18 11:40:36 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448208229 SQL Injection Prevention https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448212655 To prevent SQL injection an it administrator could implement input validation or parameterized queries. An it administrator should then also ensure that the application code should never use inputs directly and also make sure all inputs are sanitised

]]> 2023-01-18 11:45:18 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448212655 DoS Attacks https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448212810 A DoS attack (denial of service) is when an attacker prevents valid users from using computer systems, devices, or other network resources.

DoS attacks overwhelm servers, systems, or networks with traffic in order to overpower the victim resources and making it preventing or making it difficult for valid users access them.

]]> 2023-01-18 11:45:28 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448212810 Spyware https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448216347 Spyware, a malicious software that is installed on a device without the user’s knowledge. It captures data from the device and sends it back to the creator of the software. Spyware gathers information on a person and how they use their computer; this may include information such as websites visited or applications run.]]> 2023-01-18 11:49:06 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448216347 Malware https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448219634 Malware refers to malicious software, which come in a variety of different types, including viruses, worms, and trojans.
Malware can cause damage to computer systems, corrupt or change files, steal data, or cause disruption to services.

]]> 2023-01-18 11:52:22 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448219634 https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448231326 A computer worm is a standalone malware computer program that replicates itself in order to spread to other computers. In computer networks it is able to identify vulnerable machines to infect they can either contain a payload or not but still affects network traffic

]]> 2023-01-18 12:04:26 UTC https://padlet.com/2178455/dm2rolywdw2t83s2/wish/2448231326