[ITAL] Network Secruity

[ITAL] Network Secruity

Objectives

• describe the security issues that could arise from networking computers

• explain how security issues can be prevented on a computer network

• evaluate a range of physical and software based security methods for a computer network

• evaluate methods for combating IT crime

Types of security issues

• Unauthorised access

• Malware

• DoS

• 
  

Open Ended

What do you think hacking is?

Unauthorised Access

• Hacking is unauthorised access of a computer system

• Once access is obtained, confidential data or sabotage of data

• Many techniques to gain access, most common is to find out the username and password:

Open Ended

From what you learn before, list some techniques that a hacker can obtain a user's username and password.

Malware

• Malicious software - any software that cause damage to the system

• Including:

• Virus

• Spyware

• Torjan horse

Virus

• Automatically make copies of itself to devices

• Usually cause damage to the files or system

Open Ended

Research: What is a trojan horses in computer security?

Spyware

• Malware that secretly collects information from a computer

• Username, passsword, credit card information etc.

• One example is Keylogger

Denial of Service attack

• DoS is sending large amount of requests to a server that the server cannot handle

• Very difficult to prevent as the server cannot easily differentiate the good request from bad request

• A variant is DDoS - Distributed DoS

• https://www.youtube.com/watch?v=0I4O4hoKzb8

What is the best way to prevent network attacks?

Physical Security

• Protecting the equipment

• Security guard

• Physical locks on the server rooms

• Security card etc.

• Fire protection - fireproof doors, extinguishers

Open Ended

Computer servers also needed to protect from power outage, suggest some methods:

Security methods

• Access rights

• Biometric

• Firewalls

• Backup

• Encryption

• Anti-Virus

• Anti-spyware

Access Rights

• User is assigned a set of rights to access different parts of a system

• Common rights, CRUD includes:

• Create, Read, Update, Delete

Biometric

• Use biological characteristics to authenticate user's identity

• e.g. Fingerprint is said to be more secure than password - tends to have 40-100 features, and in theory unique to every person

Open Ended

List some biometric authentication methods:

Group Mind map

Draw a mind map about three different major types of network security threats mentioned in class, examples, and methods that can protect/prevent from such attacks.