Cyber Security Threats Flashcards

All 11 cards in this deck

Why are misconfigured access rights a cyber security threat?

Access rights should give each user only the data and functions their role needs. If they are set up wrongly, users (or an attacker using their account) can see, change or delete data they should not be able to reach.

What is penetration testing?

Testing a computer system or network by attempting to gain access to its resources without knowing usernames, passwords or other normal means of access, to find weaknesses an attacker could exploit.

What is cyber security?

The processes, practices and technologies designed to protect networks, computers, programs and data from attack, damage or unauthorised access.

What are the main purposes of cyber security?

To protect networks, computers, programs and data from unauthorised access, so confidential data is seen only by authorised people; from damage, so data is not changed or deleted without permission; and from attack, so systems keep working for the people who need them.

What is pharming?

A cyber attack intended to redirect a website's traffic to a fake website. Users who type the correct address can end up entering their login or payment details on the attacker's copy.

Why are weak passwords a cyber security threat?

Short or simple passwords, such as names or common words, can be guessed, or cracked quickly by a program that tries huge numbers of passwords, giving an attacker access to the account.

Why are default passwords a cyber security threat?

The passwords that devices and software come with are widely known and often published online. If they are not changed, an attacker can log in with no effort, sometimes with administrator access.

Why is removable media, such as a USB memory stick, a cyber security threat?

It can carry malware onto a computer when it is plugged in. It is also easily lost or stolen, so data copied onto it can reach unauthorised people.

Why is unpatched or outdated software a cyber security threat?

Security flaws found in software are often made public. If the update (patch) that fixes a flaw is not installed, or the software is no longer updated, attackers can exploit the flaw to get in or install malware.

What is a white-box penetration test?

A test carried out by a tester who is given knowledge of the system, and possibly basic login credentials. It simulates an attack by a malicious insider, such as an employee.

What is a black-box penetration test?

A test carried out by a tester who has no login credentials or inside knowledge of the system. It simulates an attack from outside the organisation.