Introduction to Cyber Security Threats
Cyber security threats are deliberate actions or software designed to compromise the confidentiality, integrity, or availability of computer systems and data. These threats can target individuals, organisations, or entire networks, aiming to steal information, disrupt services, or cause damage. Understanding the different types of threats is essential for recognising risks and implementing appropriate defences.
- Threats exploit vulnerabilities in software, hardware, or human behaviour.
- They can be automated or manually executed by attackers.
- The main objectives are to gain unauthorised access, steal or alter data, or disrupt normal operations.
Brute-Force Attacks, Data Interception, and DDoS Attacks
A brute-force attack involves systematically trying every possible password or key combination until the correct one is found. For example, an attacker might use software to try thousands of password guesses per second to access an account.
Data interception occurs when an attacker secretly captures data as it travels across a network. This can happen on unsecured Wi-Fi or through man-in-the-middle attacks, allowing the attacker to read sensitive information like passwords or credit card numbers.
Distributed Denial of Service (DDoS) attacks overwhelm a target system with excessive traffic from multiple sources, causing it to slow down or become unavailable to legitimate users. For instance, a website might be flooded with millions of requests, crashing the server.
- Brute-force attacks exploit weak or common passwords.
- Data interception targets data in transit, often exploiting unsecured networks.
- DDoS attacks aim to disrupt service availability by flooding resources.
Hacking and Malware Varieties
Hacking refers to unauthorised access to computer systems, often exploiting software vulnerabilities or weak security measures. Hackers may steal data, modify files, or install malicious software.
Malware is malicious software designed to harm or exploit systems. Key types include:
Viruses: Attach to files and spread when files are shared, damaging or corrupting data (e.g., a virus that deletes files). Worms: Self-replicate and spread across networks without user action, consuming bandwidth and resources. Trojan Horses: Disguise themselves as legitimate software but perform harmful actions once installed, such as opening backdoors. Spyware: Secretly monitors user activity and collects information without consent. Adware: Displays unwanted advertisements, often slowing down systems. Ransomware: Encrypts user data and demands payment for the decryption key, effectively holding data hostage.
- Viruses require user action to spread; worms spread automatically.
- Trojans rely on deception to be installed.
- Spyware and adware focus on data collection and advertising, respectively.
- Ransomware directly threatens data availability by encryption.
Pharming, Phishing, and Social Engineering
Pharming redirects users from legitimate websites to fraudulent ones without their knowledge, often by corrupting DNS entries. For example, a user typing a bank’s URL might be sent to a fake site designed to steal login credentials.
Phishing uses deceptive emails or messages that appear trustworthy to trick users into revealing sensitive information like passwords or credit card details. An example is an email pretending to be from a bank asking to confirm account details.
Social engineering exploits human psychology rather than technical vulnerabilities. Attackers manipulate individuals into divulging confidential information or performing actions that compromise security, such as revealing passwords over the phone by pretending to be IT support.
- Pharming manipulates website address resolution to redirect users.
- Phishing relies on fake communications to steal information.
- Social engineering exploits trust and human error rather than software flaws.
Summary and Impact of Cyber Security Threats
Each cyber security threat targets specific weaknesses in systems or users to achieve unauthorised access, data theft, or service disruption. The consequences can include financial loss, reputational damage, legal penalties, and loss of user trust.
For example, a ransomware attack on a hospital can prevent access to patient records, endangering lives. Similarly, a successful phishing attack on an employee can lead to a data breach exposing customer information.
Understanding these threats helps in recognising suspicious activities and applying appropriate security measures to protect data and systems.
- Threats compromise confidentiality, integrity, or availability of data.
- Impacts range from minor inconvenience to critical system failure.
- Awareness is the first step towards effective cyber defence.
At-a-glance summary
Comparison table
| Threat Type | Method of Attack | Example | Exam Tip |
|---|---|---|---|
| Brute-force attack | Systematically tries all password combinations | Using software to guess a 4-digit PIN by trying 0000 to 9999 | Explain why strong passwords reduce risk |
| Data interception | Captures data during transmission | Sniffing unencrypted Wi-Fi traffic to steal login details | Describe how encryption protects data |
| DDoS attack | Floods target with excessive traffic | Multiple infected computers sending requests to crash a website | State the effect on service availability |
| Virus | Attaches to files and spreads via sharing | A file that deletes documents when opened | Distinguish virus from worm by user action needed |
| Worm | Self-replicates and spreads automatically | Malware spreading through network without user help | Explain resource consumption caused |
| Trojan horse | Disguises as legitimate software | Fake game installing a backdoor | Highlight deception in installation |
| Spyware | Monitors user activity secretly | Software recording keystrokes to steal passwords | Identify privacy invasion |
| Adware | Displays unwanted ads | Pop-up ads slowing computer performance | Note difference from spyware and virus types |
Active recall
Quick check
1. What is the main goal of a brute-force attack?
To gain unauthorised access by systematically trying all possible passwords or keys.
2. How does a DDoS attack affect a website?
It overwhelms the website with excessive traffic, making it unavailable to legitimate users.
3. Name two differences between a virus and a worm.
A virus requires user action to spread and attaches to files; a worm spreads automatically without user intervention.
4. What is phishing and how does it trick users?
Phishing is a technique using fake communications like emails to deceive users into revealing sensitive information.
5. How does social engineering differ from hacking?
Social engineering manipulates people psychologically to gain information, while hacking exploits technical system vulnerabilities.