Software/Security Threats

Software/Security Threats

Information is the key asset in most organizations. Companies gain a competitive advantage by knowing how to use that information. The threat comes from others who would like to acquire the information or limit business opportunities by interfering with the normal business processes.

There are two type of threats-

  1. Human
  2. Natural Disasters
Software/Security Threats

Natural Disasters

Nobody can stop nature from taking its course. Earthquakes, hurricanes, floods, lighting, and fire can cause severe damage to computer systems. Information can be lost, down time, or loss of productivity can occur, and damage to hardware can disrupt other essential services. Few safeguards can be implemented against natural disasters.

Other threats such as riots, wars and terrorist attacks could be included here.

Human Threats

Malicious threats consist of inside attacks by malicious employees and outside attacks by non-employees just looking to harm and disrupt an organization n.

The most dangerous attackers are usually insiders (or former insiders), because they know many of the codes and security measures that are already in place. Insiders are likely to have specific goals and objectives, and have legitimate access to the system.

Malicious attackers can gain access or deny services in numerous ways. Some of them are given below-

Viruses

Attackers can develop harmful code known as viruses. Using hacking techniques, they can break into systems and plant viruses. They come in different forms and although not always malicious, they always take up time.

Viruses can also be spread by the e-mail and disks. Viruses can be very destructive, causing loss of information.

A simple virus can make copy of itself over and over again is relatively easy to produce. Even such a simple virus is dangerous because it will quickly use all available memory and bring the system to a halt.

A virus program is able to replicate itself. This means that the virus multiplies on a computer by making copies of itself. This replication is intentional; it is a part of the virus program.

In most cases, if a file that contains virus is executed or copied onto another computer, then that computer will also be “infected” by the same virus.

Worm

In a computer, worm is a self-replicating virus that does not alter files but resides in active memory and duplicates itself. Worms are different that a traditional virus in that they don’t spread by modifying programs on a single system, but rather by searching for and implanting destructive code onto other systems.

Many worms come in the form of e-mail file attachments, or as hidden additions to actual e-mail messages, which trigger the execution of infectious code. The malicious and ILOVEYOU e-mail viruses are examples of worms that exploited the macro feature with in Microsoft office documents.

Trapdoors

Trapdoor is basically an entry into a program that allows someone who is aware of trapdoor to gain access; it is basically used for security purposes and use by programmers to debug and test programs, and to avoid necessary set-up by the creators or the people in charge of maintenance.

Trapdoors in a computer system is a method of bypassing normal authentication procedure, securing remote access to a computer, obtaining access to plaintext, and so on, while attempting to remain undetected.

In general, trapdoors are vulnerability which they expose the system to modification during execution. They can be exploited by the original developers or used by anyone who discovers the trapdoor by accident or through exhaustive trials.

Logic Bombs

A logic bomb is a portion of a computer program intended to execute a malicious function when certain conditions are met.

Unlike viruses, logic bombs do not replicate themselves or spread to other systems on their own. Logic bombs can therefore be made to target a specific victim without posing any threat to others.

Some logic bombs are programmed to execute a certain function on a certain date, rather than after a specific event. This type of logic bomb is often called a time bomb. Malicious programs like virus, worms, and trojan horses are sometimes programmed to attack the host computer on a certain date, allowing them to spread undetected throughout the computer system before they become active.

Zombie

A zombie is a program that secretly takes over another internet attached computer and then uses that computer to launch attacks that are difficult to trace to the zombie’s creator. Zombies are used in denial-of-service attacks, against targeted web sites. The zombies is planted on hundreds of computers belonging to unsuspecting third parties, and then used to overwhelm the target website by launching an overwhelming onslaught of internet traffic.

 Trojan Horse

These are malicious programs or software code hidden inside what looks like a normal program. When a user runs the normal program, the hidden code runs as well. It can then start deleting files and causing other damage to the computer. Trojan horses are normally spread by e-mail attachments.

Anti-virus is not always effective against the trojan horses, so at that instance, the way out of the problem is to remove the Trojan horse virus manually.

To read about the story of Trojan HorseClick here

To remove Trojan horse manually, you should follow these steps-

  1. Recognize the Trojan
  2. Stop the function of system restore
  3. Go to add or remove programs
  4. Remove extensions

You May Also Like-
What do you mean by Information Security?
What are imperfection or defects of Solids
What Do you know about Solid State?
What do you know about Solid Waste??
Processing of solid waste and On-site Handling by engineering System
What do you know about Hazardous Waste??
Landfill Disposal of Solid Waste

Right Understanding

Right Understanding We all know that the Human Desire is to be in continuous happiness which is the need of I (self). But do you know, from where Continuous happiness will come? No, right! So continuous happiness is to be in Right Understanding, Right Feeling, and Right Thought that is Activity of I (Self). Do…

Continue Reading Right Understanding

Where We Are

Where We Are (Self-Evolution) We exist as human being. We want to live a fulfilling life. We have some desires and we have some programs for the fulfilment of it. We need to understand our basic aspiration and program for its fulfillment correctly and comprehensively. Only then, we can ensure fulfillment. We should explore ourselves…

Continue Reading Where We Are

Highway Construction

Highway Construction Embankment Construction Materials and General Requirements The materials used in embankments, subgrades, earthen, shoulders, and miscellaneous backfills shall be soil, moorum, gravel, a mixture of these. Clay having liquid limit exceeding 70 and plasticity index exceeding 45; shall be considered unsuitable for embankment. Sub-grade and top 500mm portion of the embankment just below…

Continue Reading Highway Construction

Special Concretes

Special Concretes Concrete is most vital material in modern construction. In addition to normal concrete, other varieties in use are, high strength and high-performance concrete, self-compacting, lightweight, high density, fiber reinforced, polymer, colored concrete, etc. The making of concrete is an art as well as a science. Special types of concrete are those with out-of-the-ordinary…

Continue Reading Special Concretes

Marketing Practices

Marketing Practices Success in the world of business, no matter how you earn it, you have to rule on the marketplace. Although luck plays a role in the outcome of the market strategies. In the business decisions, there should be the understanding of market otherwise the failure will take place by the marked decisions. While…

Continue Reading Marketing Practices

Risk Analysis

Risk Analysis The risk that remains after the implementation of controls is called the residual risk. All systems will have residual risk because it is virtually impossible to completely eliminate risk to an IT system. In other words, we can say that there are two main parts of the security risk analysis known as Quantitative…

Continue Reading Risk Analysis

You may also like...

Leave a Reply

Your email address will not be published. Required fields are marked *