E-Security (Chapter 5)

Question 1

Keeping personal data secure (6)

Answer 1

• Firewall
• Penetration testing
• Levels of access
• Authentication techniques
• Network Policies
• Software Updates

Question 2

Misuse of personal data (4)

Answer 2

Smishing, vishing, phishing, pharming

Question 3

Types of malware (6)

Answer 3

• Spyware
• Adware
• Worm
• Trojan Horse
• Virus
• Rootkit

Question 4

How malware is used (3)

Answer 4

Fraud
Industrial Espionage
Sabotage

Question 5

Malicious bots (3)

Answer 5

Ransomware
Scareware
Fileless Malware

Question 6

Software prevention of malware (3)

Answer 6

Firewall
Anti virus
Anti Malware

Question 7

Physical prevention of malware (6)

Answer 7

• Develop anti-malware policies
• All employees should be educated on malware
• OS and software kept up-to-date
• Using strong passwords
• Logging off after using a computer
• Careful inspection of emails and messages

Question 8

Firewalls

Answer 8

FIrewalls prevent data coming into the network, preventing hackers.
It filters traffic to only let in acceptable data.
It can also prevent leakage of data coming out of the network.

However, hackers can still physically steal the computer
^ or access the network after bypassing security (eg password)
^ or use software to change the IP to an acceptable one

Question 9

Penetration testing

Answer 9

This is when companies employ a person to deliberately attack their network to identify any weaknesses in the security.
It is a simulation of a real cyberattack
It can help a company evaluate their network security // implement more secure methods.

However, it’s time-consuming and can disrupt the business. it also has to be done while system isnt used which can cause downtime

Question 10

Authentication techniques

Answer 10

Users in the network should use an ID and password to log in.
They can also use smart cards or biometric data (eg fingerprint)
^ This is more expensive but is more effective as it’s unique to the user & cant really be changed

Question 11

Levels of access

Answer 11

Users in the network can be given different levels of access in the network depending on what tjey need to know.
Users with higher access can see more than others

However, its complicated to set up and can delay work

Question 12

Network policies

Answer 12

Network Policies are rules implemented to allow a company to see who is allowed to access their networks. when a worker joins, they must sign an agreement.
^ it doesn’t stop hackers, but it limits the access employees have to personal data // what they do with it
(e.g.: security policy, acceptable use policy, etc.)

Question 13

Software updates

Answer 13

Software updates eliminate bugs and make software easier to use.
It eliminates security weaknesses, boosts performance, brings new features
It is important to update asap as hackers exploit weaknesses quickly
(Small patches/Major updates)

Question 14

Pharming

Answer 14

Making the user download malicious data // installing it without their knowledge
Can redirect users to fake websites to download malware (if they hack the DNS server or infect the computer)

Question 15

How to prevent pharming (5)
## Footnote
hint:
FPLANS
DEOULC

Answer 15

• Keeping software updated
• be wary for fake websites
• Only enter personal data into websites with SSL (HTTPS)
• Enabling two-factor authentication
• using anti-malware softwarre

Question 16

Smishing

Answer 16

Smishing (SMS phishing) tricks users into clicking on harmful links through text messages.
The scammers pose as banks, delivery services, etc. to send urgent messages.

Question 17

Preventing smishing (4)

Answer 17

• check for weird URLs
• spelling and grammatical errors
• do not click on links from unknown numbers
• ask the company about the SMS

Question 18

Vishing

Answer 18

Vishing (voice phishing) are phone calls made to trick someone into telling them personal / sensitive data.
scammers pose as banks or prize-givers, asking for personal info over the phone such as their credit card number

Question 19

Preventing vishing (5)

Answer 19

• dont answer unknown numbers
• dont call numbers in voicemails
• block suspicious numbers
• dont share personal details over the phone
• confirm with the og (banks)

Question 20

Phishing

Answer 20

Phishing is a way for scammers to trick users into giving personal information through email.
1: banks - the scammer pretends to be a bank or official company, containing a link to a fake website so that the user enters their information.
2: prizes - the scammer pretends that the user has won a prize (eg free car) and sends them a link for them to enter their personal information .

Question 21

Preventing phishing (5)

Answer 21

• anti-malware // anti-phishing software
• Look for errors in the email
• Look for generic subjects (dear user)
• Delete suspicious emails / move them to spam
• dont accept too-good-to-be-true deals.. obviously..

Question 22

Use of malware in fraud

Answer 22

It involves the use of the computer to benefit financially (illegally).
Once fraudsters get personal info, they can sell it to other criminals or commit identity theft

Question 23

Uses of malware in industrial espionage

Answer 23

Malware is used to spy on competitors. It gains access to an employer’s computer and uses / steals a large amount of info on it.
It can also be bidded to other criminals for the highest sum of money
(eg spyware can be used to record video recordings of the computers activities, stealing relevant personal information)

Question 24

uses of malware in sabotage

Answer 24

Malware can be used to intentionally attack specific computers and networks so that they stop working. It involves stopping users from accessing the network or allowing hackers to access it
(eg worms are used to slow down processes significantly)

Question 25

Ransomware

Answer 25

Ransomware is a type of malware that restricts a user from accessing certain files unless a ransom is paid to a hacker. They do this by encrypting the files on the computer and asking for money to decrypt it.

Question 26

Fileless malware

Answer 26

Fileless malware doesn’t rely on files so it can vanish without evidence once it has been executed, making it harder to track down where the malware came from.

Question 27

Scareware

Answer 27

Scareware tricks users into thinking their computer has been infected by sending messages to the user. It scams them by making them pay for “an antivirus”

Question 28

Virus

Answer 28

A virus attaches itself to legit programs or files, and self-replicates and spreads to other computers It corrupts data and steals information, slowing down / stopping the system They spread through infected files, links, or downloads

Question 29

How to prevent viruses (4)

Answer 29

- dont open random attachments - anti-virus software - firewall - scan hardware for viruses

Question 30

Worm

Answer 30

A worm is a replicating malware which spreads across networks, exploiting holes in them. their aim is to fill up bandwidth to slow everything down. they can be identified by noticing less free space and shitty performance

Question 31

How to prevent worms

Answer 31

- updating software - anti-malware - disconnecting computers from networks when not needed

Question 32

Trojan horse

Answer 32

Malware that is disguised as legit software, which tricks users into installing it, then secretly steals data / creates backdoors for other malware or hackers. It is only executed when run by the user and it does not replicate.

Question 33

Preventing trojan horses (2)

Answer 33

- only run software from trusted sources - anti-malware

Question 34

Spyware

Answer 34

Malware that collects information of a user’s activities without their knowledge. it uses keyloggers to steal passwords or personal data

Question 35

Preventing spyware (4)

Answer 35

- noticing a reduction in processing power / bandwidth while no apps or files are in use - not downloading any software from unknown sources - reading the fine print of software that may be tricking you into agreeing to spyware - anti-malware

Question 36

Adware

Answer 36

Adware is normally downloaded with free software and automatically generates . its not necessarily dangerous, just annoying since it can slow down your activity

Question 37

Preventing adware (2)

Answer 37

- anti-malware - Checking the list of components in the software that you are downloading

Question 38

Rootkit

Answer 38

Malware that enables a criminal to gain admin priveleges to a computer without the users knowledge to steal data. It can either **1** be downloaded through links or **2** be directly installed through USBs.

Question 39

Preventing rootkits (3)

Answer 39

- dont plug random usbs into your computer - strong passwords that are regularly changed. - anti-malware

Question 40

Advantages of malware (for criminals)

Answer 40

- automatically spread / steal data - financial gain for criminals - data theft - disruption

Question 41

disadvantages of malware (for users)

Answer 41

- data loss or damage - financial loss - privacy invasion - device lag - identity theft / legal consequence