Understanding and Preventing Malware

• Malware is software designed to infect computers and facilitate cybercrimes like fraud and identity theft.

Malware Risks

• Web surfing, online shopping, banking, email, instant messaging, and gaming without protection greatly increases the risk of being victimized by malware.
• Malware exploits operating system and browser vulnerabilities to install malicious Trojan horse programs.
• Trojans can be disguised as legitimate files (games, music, etc.) or spread through file sharing networks.
• Trojans are increasingly found in instant messages and mobile phones, not just email.

Effects of Malware

• Computer crashes, spontaneous reboots, or unexplained slowdowns can occur.
• Worm infections can slow down internet connections.
• Files may be deleted, corrupted, or encrypted.
• Keylogging malware records keystrokes, allowing hackers to steal passwords and access accounts.

Preventing Malware

• Use strong security software, including firewalls, spam filters, anti-virus, and anti-spyware programs.
• Enable operating system updates.
• Train staff to be cautious about opening attachments.
• Regularly back up files.

Phishing Explained

• Phishing is a fraudulent technique where criminals pose as trustworthy entities in electronic communications to steal personal information.
• It's a rapidly growing method for stealing financial information and committing identity theft.
• Phishers use emails and websites that mimic legitimate institutions.

Effects of Phishing

• Phishers can access accounts, withdraw money, or make purchases.
• They may open new accounts in the victim's name for fraudulent purposes.
• Phishing can lead to access of high-value corporate data.
• Reputational damage can occur since financial damage can blacklist institutions.

Preventing Phishing

• Employ strong security software (firewall, spam filter, anti-virus, anti-spam).
• Educate staff to recognize fake websites and emails.
• Train staff never to disclose personal or financial information.
• Disable pop-ups.

Brute Force Attacks

• A brute force attack attempts to decode encrypted data, like passwords, through trial and error.

Effects of Brute Force Attacks

• Data theft and unauthorized access to corporate systems can result.

Preventing Brute Force Attacks

• Implement network lockout policies that limit login attempts.
• Use software with progressive delays after failed attempts.
• Train staff to create strong passwords with symbols and numbers.
• Use challenge-response tests like reCAPTCHA.

Denial of Service (DoS) Attacks

• A DoS attack floods a server with useless traffic, preventing it from responding to legitimate requests.
• Distributed Denial of Service (DDoS) attacks use multiple compromised systems to target a single system.

Effects of DoS Attacks

• Revenue losses occur from downtime.
• Productivity is lost when critical network systems are shut down.
• Reputation damage occurs if customers cannot access a site or experience a data breach.

Preventing DoS Attacks

• Implement strong security software (firewall).
• Use packet filters on routers.
• Properly configure the web server.
• Employ good network policies, including audits, logs, and monitoring.

Data Interception and Theft

• Attackers monitor data streams to gather sensitive information, often by sniffing network traffic.
• Sniffing involves monitoring network traffic for data, such as passwords.

Effects of Data Interception and Theft

• Usernames and passwords can be discovered.
• Unauthorized system access is granted.
• Corporate data may be disclosed or stolen.

Preventing Data Interception and Theft

• Use strong encryption.
• Use virtual private networks (VPNs).
• Train staff on password security, locking computers, and using portable storage devices securely.
• Employ network forensics.

SQL Injection

• SQL injection is a code injection technique targeting data-driven applications.
• Attackers can inject code into text boxes that is then executed by the server.

Effects of SQL Injection

• Database contents can be exposed.
• Data can be modified or deleted.
• Rogue records can be added.

Preventing SQL Injection

• Validate input fields.
• Use parameterized queries.
• Use database permissions.
• Conduct penetration testing.

People as the Weak Point (Social Engineering)

• Security risks stem from:
  • Not logging off or locking computers and doors.
  • Improper use of memory sticks and portable storage media.
  • Loss or theft of laptops.
  • Weak passwords.
  • Lack of awareness about phishing.
  • Failure to conduct network forensics or penetration testing.
  • Not installing updates to anti-malware and operating systems.
  • Poor server and firewall configuration.