T4 - Network threats

Question 1

Prevention methods for malware

Answer 1

• Anti-malware, anti-virus (both are the same thing, in OCR only put one of these down not both or you will only get one mark instead of two)
  -encryption
  -user access levels
  -firewall
  -backup / recovery procedures

Question 2

What is Malware:

Answer 2

are executable programs that run on a computer

Question 3

Key info about Computer virus:

Answer 3

replicate their code in other programs
infect other computers
harm the computer by deleting, corrupting or modifying files

Question 4

Key info about Worms:

Answer 4

replicates itself in order to spread to other computers
They might cause no damage to the attacked computers
They slow down networks and computers

Question 5

Key info about Trojan horses:

Answer 5

They have a program, game or cracked file which is something the user wants
They have negative program code which causes damage, takes control, or provides access to the computer

Question 6

Key info about Ransomware:

Answer 6

Holds a computer hostage by locking or encrypting access to it
If the data is encrypted, not even a cyber security professional will be able to recover the data unless backups are available
Once a ransom is paid to the attacker, access is restored

Question 7

eg of malware

Answer 7

-virus
-worms
-trojan horse
-ransomware

Question 8

Unpatched software

Answer 8

– if software and security updates are not installed then the software will be vulnerable to attacks

Question 9

Out-of-date anti-malware

Answer 9

– if software, such as anti-virus software, isn’t regularly updated then it won’t be able to detect the latest viruses

Question 10

Social engineering

Answer 10

• the ability to obtain confidential information by asking people for it

Question 11

Shoulder surfing

Answer 11

• the ability to get information or passwords by observing as someone types them in
  -Looking over someone’s shoulder
  -Using a CCTV camera

Question 12

Phishing -

Answer 12

Emails, texts or phone calls are sent to users commonly pretending to be from a bank or website
Email will be forged
Try to obtain = Usernames, Passwords, Credit cards details

Question 13

What to look out for for phishing:

Answer 13

for OCR you only need to know 4 of these
- un-personalised greeting
- The sender’s address
- Forged link
- Request for personal information
- Sense of urgency
- Poor spelling and grammar

Question 14

What to look out for for phishing: greeting

Answer 14

The phishers don’t know your name – just your email address, so the greeting is not personalised

Question 15

What to look out for for phishing: - The sender’s address

Answer 15

is often a variation of a genuine address

Question 16

Denial of service:

Answer 16

a hacker will use or infect a computer so that:
it sends as many requests to the server as it can (known as a flood)
the server can’t respond fast enough so slows down or goes offline

Question 17

A man-in-the-middle attack (MITM):

Answer 17

allows the attacker to intercept communications between the user and server.

Question 18

Man in the middle attack allows attacker to do what when hacked

Answer 18

The attacker can then:
eavesdrop to find passwords and personal information
add different information to a web page or other communication such as email

Question 19

What to look out for for phishing: Forged link:

Answer 19

The link looks genuine, but it may not link to the website given.

Question 20

What to look out for for phishing: sense of urgency

Answer 20

Criminals try to persuade you that something bad will happen if you don’t act fast

Question 21

example of usb with malware in a workplace

Answer 21

Criminals sometimes leave a USB stick containing malware in a public place such as a company car park
An unsuspecting employee may pick it up and insert it into their computer
The malware can now install onto the computer so that a hacker can gain access to files, personal data and system resources

Question 22

In a brute force attack:

Answer 22

a hacker will try every combination of password until the correct password is found

Question 23

SQL injection = Structured Query Language :

Answer 23

is a database query language
takes advantage of web input forms to access or destroy data
commands can be input into web forms instead of the expected ‘real’ data
interpreted by vulnerable web applications and end up causing damage or releasing personal information

Question 23

SQL injection stands for

Answer 23

= Structured Query Language :