System Security Threats and Controls

System Security

• System security involves controls and safeguards to minimize downtime, interference, and malicious intrusion.

Physical Security

• Physical threats to a system include:
• Physical access to devices
• Attaching components to devices
• Tampering with devices
• Jamming wires
• Countermeasures include:
• Access control
• Surveillance
• Backup

OS and Application Security

• Attacks on OS and applications include:
• Password attacks
• Malware attacks
• Pharming
• Spam
• Phishing attacks

Password Attacks

• Password attacks are a common technique to authenticate systems.
• Passwords can be extracted through:
• Sniffing
• Brute force
• Dictionary attack
• Prevention measures include:
• Setting strong, hard-to-guess passwords
• Account lock features
• Multi-factor authentication
• Encryption

Issues Related to Passwords

• Design problems include using personal data.
• Operation issues include using common or easy-to-guess passwords.
• Application issues include password checking issues.

Good Practices for Creating Passwords

• Dos:
• Use lengthy passwords
• Use case-sensitive passwords
• Include numbers and special characters
• Use random characters
• Make passwords memorable
• Don'ts:
• Use personal data
• Use short passwords
• Use repetitive characters
• Use the same password for multiple applications

Alternatives to Passwords

• Biometric data includes:
• Signatures
• Face recognition
• Voice recognition
• Fingerprints
• Iris patterns
• Additional questions, such as:
• What is your pet's name?
• What is your hometown?
• Where did you complete secondary school?

Multi-Factor Authentication

• Additional login steps after entering a username and password.

Malware Attacks

• Malware is unwanted software installed without consent.
• Risks include:
• Stealing, encrypting, or deleting sensitive information
• Hijacking or altering core system functions
• Monitoring user activity without permission
• Extorting money
• Introducing spam or forced advertising

Types of Malware

• Ransomware: disables access to data until ransom is paid.
• Spyware: collects user activity data without knowledge.
• Adware: serves unwanted advertisements.
• Trojan: disguises itself as desirable code or software, distributing viruses, worms, spyware, etc.
• Worms: spreads through a network by replicating itself.
• Virus: piece of code that inserts itself into an application and executes when the app is run.
• Rootkits: gives hackers remote control of a victim's device.
• Keyloggers: spyware that monitors user activity.
• Bots/Botnet: software application that performs automated tasks on command.

This quiz covers physical and system security threats and controls, including downtime, interference, malicious intrusion, physical access, and tampering with devices.