Malware, Phishing and Network Policies Keywords Malware, Viruses, Worms, Trojan Horses, Phishing, Social Engineering, Data Interception, Network Policies Systems Security Malware, Phishing and Network Policies

Computing Threats Objectives BEGINNER: Explain the different types of malware. ADVANCED: Understand how phishing operates. EXPERT: Discuss how data can be intercepted. Starter activity

Malware Define: Viruses Worms Trojan Horses Objectives BEGINNER: Explain the different types of malware. ADVANCED: Understand how phishing operates. EXPERT: Discuss how data can be intercepted. Otherwise known as ‘malicious software’. Software which can be malicious if damaging to a computer or network. Define: Viruses Worms Trojan Horses Starter activity

Definitions Objectives Viruses: BEGINNER: Explain the different types of malware. ADVANCED: Understand how phishing operates. EXPERT: Discuss how data can be intercepted. Viruses: Malicious software designed to cause harm to a network or computer system. Attaches itself to programs or files on a computer or server. Can affect all components of an operating system. Around 82,000 viruses are made each day. Worms: Replicates itself in order to spread to other computers. Often using a computer network. In order to achieve this, the worm exploits vulnerabilities across the computer network. Unlike a virus, it does not need to attach to a program. Trojan Horse: Malicious computer program. Designed to access a computer by misleading users of its intent. Example: Email appearing to have been sent from a bank asking to download security software which would improve security where in fact the software intention is to give unauthorised access to the system. Starter activity

Phishing Define: Social Engineering Computer Phishing Objectives BEGINNER: Explain the different types of malware. ADVANCED: Understand how phishing operates. EXPERT: Discuss how data can be intercepted. Define: Social Engineering Computer Phishing Telephone Phishing Data Interception/Thefts Starter activity

Definitions Social Engineering: Objectives BEGINNER: Explain the different types of malware. ADVANCED: Understand how phishing operates. EXPERT: Discuss how data can be intercepted. Social Engineering: Relies on human interaction (social skills). Commonly involves tricking users into breaking normal security procedures. Method does not revolve around technical cracking techniques such as worms or viruses. Computer Phishing: Form of social engineering. Designed to acquire sensitive information such as usernames, passwords, card details etc. Most common phishing attacks are sent through email. Starter activity

Definitions Objectives Telephone Phishing: BEGINNER: Explain the different types of malware. ADVANCED: Understand how phishing operates. EXPERT: Discuss how data can be intercepted. Telephone Phishing: Telephone system mirroring – direct phone calls that pretend to be an official service. For example, a telephone phishing system would request similar prompts to a bank if the exploit was to gain banking information. User could be asked to enter bank number, expiry, CCV, PIN and system may reject or ask for re-entry to ensure original digits are correct. Data Interception and Theft: Data travels across networks in packets. Packets can be intercepted. If packets are encrypted, they cannot be read without a key. Unencrypted packets can be re-assembled using signatures. Data can also be intercepted physically, for example portable hard drives and other external hardware can be stolen. Starter activity

Network Policy Objectives BEGINNER: Explain the different types of malware. ADVANCED: Understand how phishing operates. EXPERT: Discuss how data can be intercepted. Outlines rules for network access. Most common is Acceptable Use Policy (AUP). You may have been asked to agree to an AUP when joining your school. What could a poor network policy lead to? Users could be unaware of the risks of: Using software Opening emails turning off firewalls etc. Most networks restrict users to what they can/cannot do. Can you install software on your school PC? Do you have filters on your email and internet browser? Starter activity