CO1201 Computer Security Quiz

Network Security

• Network security categories:
  • Physical Network Security: prevent unauthorized physical access to network components
  • Administrative Network Security: controls user behavior of using the network
  • Technical Network Security: protect data stored and in transit

Physical Network Security

• Access control:
  • Badges/ IDs
  • Biometrics (face detection, Iris and Fingerprints)
  • Smart locks
  • Key pads
• Surveillance:
  • 24/7 cameras
  • Guards
  • Sensors-based mechanisms
• Backup station (DR)

Administrative Network Security

• Allow only privileged personnel to make changes to the network
• Keep a log of the changes made

Technical Network Security

• Network-based attacks:
  • Sniffing/ Eavesdropping
  • Man-in-the-middle attack
  • Spoofing
  • Denial of Service

Eavesdropping

• Information like passwords, card details, and other sensitive data is easily stolen while it is getting transferred from one device to another
• Also known as sniffing attack

Sniffing

• Access to the network and intercept packets passing through the network
• Prevention methods:
  • Intrusion Detection Systems (IDS)
  • Encryption

Encryption

• Information is converted into a secret code that hides the information's true meaning
• Use a key to:
  • Make the secret code
  • Get the message from secret code
• Process:
  • Encrypt at the sender
  • Decrypt at the receiver
• Encryption methods:
  • WEP, WPA, WPA2, RSA
  • IPSec

Firewall

• Filters packets:
  • Receiving to the network (Ingress traffic)
  • Sending from the network (Egress traffic)
• Check the rules in Windows firewall for filtering packets

Prevention Methods

• Sniffing, Eavesdropping, Man-in-the-middle: Encryption
• Spoofing, DoS: IDS, Firewall

System Security

• Controls and safeguards taken to minimize:
  • Downtime
  • Interference
  • Malicious intrusion
• Categories:
  • Physical security
  • OS and application security

Physical Threats to a System

• Physical access to devices
• Attaching components to devices
• Tamper with devices
• Jamming the wires
• Prevention methods:
  • Access control
  • Surveillance
  • Backup

Attacks on OS and Applications

• Password attacks
• Malware attacks
• Pharming
• Spams
• Phishing attacks

Password Attacks

• Common technique to authenticate systems
• Can extract by:
  • Sniffing
  • Brute force
  • Dictionary attack
• Prevention methods:
  • Set a good password that cannot be guessed easily
  • Account lock features
  • Multi-factor authentication
  • Encryption

Good Practices for Creating Passwords

• Dos:
  • Lengthy password
  • Case-sensitive password
  • Numbers and special characters included
  • Random characters
  • Memorable password
• Don'ts:
  • Personal data
  • Short passwords
  • Repetitive characters
  • Same password for multiple applications

Alternatives to Passwords

• Biometric data:
  • Signature
  • Face recognition
  • Voice recognition
  • Fingerprint
  • Iris pattern
• Additional questions

Malware

• Methods of infection:
  • Network
  • Infected files
  • Websites
  • Email
  • USB
• Prevention methods:
  • Install anti-virus software and anti-spyware software

Credit/ Debit Cards

• Allows cardholders to borrow funds to pay for goods and services
• Credit cards:
  • Customer has to pay back the amount to the bank after the purchase in a given time
  • Otherwise, interest is added
• Debit cards:
  • Customer directly debits money from the bank account
• Frauds:
  • Using credit card number and PIN number for transaction without the knowledge of the owner
  • Forgery
• Prevention methods:
  • Request additional information
  • Verification code
  • Daily transaction limit

Smart Cards

• Most credit and debit cards are now smart cards
• Includes:
  • Microprocessor
  • Memory chip
  • RFID
• Has to place in the device instead of swiping
• RFID allows creating virtual cards instead of physical cards using smartphones

This quiz covers the basics of computer security, including network security and system security. It's a part of the introduction to computer systems course.