Systems Security Keywords Protecting Systems Network forensics, Penetration testing, Network policies, Anti-malware software, Firewalls, Anti-virus, Legislation, Packet sniffing Systems Security Protecting Systems

Video Objectives BEGINNER: Explain what is meant by ’network forensics’. ADVANCED: Understand the legalities and consequences of unlawfully intercepting data and the concept of penetration testing. EXPERT: Explore network policies and how they can help protect networks. Starter activity

Attacks Define: Objectives Network Forensics Penetration Testing BEGINNER: Explain what is meant by ’network forensics’. ADVANCED: Understand the legalities and consequences of unlawfully intercepting data and the concept of penetration testing. EXPERT: Explore network policies and how they can help protect networks. Define: Network Forensics Penetration Testing Anti malware Software Firewalls Network Policies Starter activity

Network Forensics A branch of digital forensics. Objectives BEGINNER: Explain what is meant by ’network forensics’. ADVANCED: Understand the legalities and consequences of unlawfully intercepting data and the concept of penetration testing. EXPERT: Explore network policies and how they can help protect networks. A branch of digital forensics. Covers the forensic investigation of networks and their devices attached to them. Primarily involves the examination of data sent across a network (or networks). May involve the use of various forensic techniques including ‘packet sniffing’. Packet sniffing involves the interception of packets across a network. Packet sniffing tools can help users understand what is being sent around the network at the time. Most tools reveal all data sent over the network, although a lot of it may be encrypted! Performing packet sniffing without express written permission of all parties is in breach of UK law. Starter activity

Definitions Penetration Testing Anti malware Software Objectives BEGINNER: Explain what is meant by ’network forensics’. ADVANCED: Understand the legalities and consequences of unlawfully intercepting data and the concept of penetration testing. EXPERT: Explore network policies and how they can help protect networks. Penetration Testing Tests performed under a controlled environment by a qualified person. Checks for current vulnerabilities and explores potential ones in order to expose weaknesses in the system so they cannot be maliciously exploited. May use tools to help them in their duties. Performed by a ‘penetration tester’. Anti malware Software Software with the aim of preventing malware from entering the system. Malware - Otherwise known as ‘malicious software’ Software which can be malicious if damaging to a computer or network. Examples include viruses, worms and trojan horses. Starter activity

Firewalls Objectives BEGINNER: Explain what is meant by ’network forensics’. ADVANCED: Understand the legalities and consequences of unlawfully intercepting data and the concept of penetration testing. EXPERT: Explore network policies and how they can help protect networks. Software that performs a ‘barrier’ between a potential attacker and the computer system. Can be held on a server, or a standalone computer. Many have this feature as part of an anti-virus package. Not 100% effective – an attacker could exploit a vulnerability. Monitor application and network usage. Has the ability to block access from certain computer users and disable processes which may be perceived as a threat. Starter activity

Network Policies Objectives BEGINNER: Explain what is meant by ’network forensics’. ADVANCED: Understand the legalities and consequences of unlawfully intercepting data and the concept of penetration testing. EXPERT: Explore network policies and how they can help protect networks. Defines how a system can be secured through specific rules or requirements. Explains how particular users should access and treat a system. Specifies rules for use, for example: Who should access particular parts of a system (no distributing of passwords) What systems can be used for (eg. Work only / no personal use) How to handle specific systems like email (no passing chain mail) Starter activity