It Essentials Ch 9: Security

Front 1

Physical Threats

Back 1

Theft, Damage, or Destruction to computer equipment

Front 2

Data Threats

Back 2

Removal, corruption, denial of access, unauthorized access, or theft or information.

Front 3

Internal Threats

Back 3

Employees have access to data, equipment, and the network

* Malicious threats are when an employee intends to cause damage.
* Accidental threats are when the user damages data or equipment unintentionally.

Front 4

Virus

Back 4

Software code that is deliberately created by an attacker. Viruses may collect senstive information or may alter or destroy information

Front 5

Worm

Back 5

A self-replicating program that uses the network to duplicate its code to the hosts on the network. At minimum, worms consume bandwidth in a network.

Front 6

External Threats

Back 6

Users outside of an organization that do not have authorized access to the network or resources

* Unstructured – Attackers use available resources, such as passwords or scripts, to gain access and run programs designed to vandalize
* Structured – Attackers use code to access operating systems and software

Front 7

Trojan

Back 7

A Trojan is technically a worm. The Trojan does not need to be attached to other software. Instead, a Trojan threat is hidden in software that appears to do one thing, and yet behind the scenes it does another. Trojans are often disguised as useful software. The Trojan program can reproduce like a virus and spread to other computers. Computer data damage and production loss could be significant. A technician may be needed to perform the repairs, and employees may lose or have to replace data. An infected computer could be sending critical data to competitors, while at the same time infecting other computers on the network.

Front 8

Adware

Back 8

Adware is a software program that displays advertising on your computer. Adware is usually distributed with downloaded software. Most often, adware is displayed in a popup window. Adware popup windows are sometimes difficult to control and will open new windows faster than users can close them.

Front 9

Grayware

Back 9

Grayware or malware is a file or program other then a virus that is potentially harmful. Many grayware attacks are phishing attacks that try to persuade the reader to unknowingly provide attackers with access to personal information. As you fill out an online form, the data is sent to the attacker. Grayware can be removed using spyware and adware removal tools.

Front 10

Spyware

Back 10

Spyware, a type of grayware, is similar to adware. It is distributed without any user intervention or knowledge. Once installed, the spyware monitors activity on the computer. The spyware then sends this information to the organization responsible for launching the spyware.

Front 11

DoS

Back 11

Denial of Service prevents users from accessing normal services, such as email and a web server.

Front 12

Ping of Death

Back 12

A series of repeated, larger than normal pings that crash the receiving computer

Front 13

Email bomb

Back 13

A large quantity of bulk e-mail that overwhelms the e-mail server preventing users from accessing it

Front 14

DDos

Back 14

another form of attack that uses many infected computers, called zombies, to launch an attack. With DDoS, the intent is to obstruct or overwhelm access to the targeted server. Zombie computers located at different geographical locations make it difficult to trace the origin of the attack.

Front 15

Spam

Back 15

Unsolicited email that can be used to send harmful links or deceptive content

Front 16

Popups

Back 16

Windows that automatically open and are designed to capture your attention and lead you to advertise sites.

Front 17

SYN Flood

Back 17

Randomly opens TCP ports, tying up the network equipment or computer with a large amount of false requests, causing sessions to be denied to others

Front 18

Spoofing

Back 18

Gains access to resources on devices by pretending to be a trusted computer

Front 19

Man-in-the-Middle

Back 19

Intercepts or inserts false information in traffic between two hosts

Front 20

Replay

Back 20

Uses network sniffers to extract usernames and passwords to be used at a later date to gain access

Front 21

DNS Poisoning

Back 21

Changes the DNS records on a system to point to false servers where the data is recorded

Front 22

Security Policy

Back 22

Define a process for handling network security incidents
Define a process to audit existing network security
Define a general security framework for implementing network security
Define behaviors that are allowed
Define behaviors that are prohibited
Describe what to log and how to store the logs: Event Viewer, system log files, or security log files
Define network access to resources through account permissions
Define authentication technologies to access data: usernames, passwords, biometrics, smart cards

Front 23

WEP

Back 23

the first generation security standard for wireless. Attackers quickly discovered that WEP encryption was easy to break. The encryption keys used to encode the messages could be detected by monitoring programs. Once the keys were obtained, messages could be easily decoded.

Front 24

WPA

Back 24

an improved version of WEP. It was created as a temporary solution until the 802.11i (a security layer for wireless systems) was fully implemented. Now that 802.11i has been ratified, WPA2 has been released. It covers the entire 802.11i standard.

Front 25

LEAP

Back 25

# Lightweight Extensible Authentication Protocol (LEAP), also called EAP-Cisco – a wireless security protocol created by Cisco to address the weaknesses in WEP and WPA. LEAP is a good choice when using Cisco equipment in conjunction with operating systems like Windows and Linux.

Front 26

Troubleshooting process

Back 26

1. Gather Data from Customer
2. Verify Obvious Issues
3. Try Quick Solutions first
4. Gather Data From Computer
5. Evaluate Problem and Implement Solution
6. Close with Customer