In chapter nine I have learnt about Fundamental Security. Computer and network security help to keep data and equipment functioning and provide access only to the correct people. Everyone in an organization should give high priority to security because everyone can be affected by it. A technician must recognise both types of threats to computer security:
- Physical – Events or attacks that steal, damage, or destroy equipment, such as servers, switches, and wiring
- Data – Events or attacks that remove, corrupt, deny access, allow access, or steal information
Threats can be internal or external, accidental or on purpose:
- Internal – Employees have access to data, equipment, and the network
- Purpose threats are when an employee intends to cause damage.
- Accidental threats are when the user damages data or equipment when he didn’t mean to.
- External – Users outside of an organization that do not have authorized access to the network or resources
- Unstructured – Attackers use available resources, such as passwords or scripts, to gain access and run programs designed to cause damage.
- Structured – Attackers use code to access operating systems and software .
Its not just people that cause threats to security its also viruses the three main viruses are:
- Trojan
- Worms
- Virus
These can all be stopped by a range of types of software for example;
- Spyware
- AVG
- Firewalls
A social engineer is a person who is able to gain acess to a network or equipment by tricking them in to giving them the access infomation. Here are some tips to help protect against social engineering:
- Never give out your password
- Always ask for the ID of unknown person
- Restrict access of unexpected visitors
- Don’t leave visitors to look around by themselves
- Never post your password in your work area
- Lock your computer when you leave your desk
- Don’t let anyone follow you through a door that requires an access card
|
|
