Tutorial 4: Computer Security- Methods of Attack

Hello everyone, welcome to my final tutorial blog. This time I am going to talk about computer security and the ways to attack. Generally speaking there are 6 ways to attack a computer. I will talk about each method and the impact it can have on businesses and home users.           

The first way a computer can be attacked is called data tampering. Data tampering is often done by insiders who have legal access to the system but use this in an illegal way. It can mean entering false, fabricated or fraudulent data into the computer or changing or deleting existing data. Without any security mechanism in place it can be very difficult to find the people responsible for that.        
            The second method is programming attacks. This kind of attack uses programming techniques to directly or indirectly attack a computer. An example would be a buffer overflow, where the program overwrites existing memory. This increases the vulnerability of the whole system. It is however quite complicated compared to data tampering and programming skills as well as knowledge of the targeted system are required.

            A third method to attack a system is computer viruses. A virus is a computer program that has the ability to attach itself to other computer programs, thereby infecting them. Most often the users/ owners of the software or program are not aware of the infection. When the software is used, the virus spreads, causing damage to that program and/or others.
            A quite similar method of attack is called a worm. Compared to a virus a worm has the ability to spread itself. Whereby a virus has to wait that the program/ software is executed, the worm tries to find security problems in the system, like “no password protection of networks” to infect and spread. Most often worms use networks to spread or infect and they can even infect hand held devices and spread via instant messaging. 

   A fifth method is called a Zombied PC. A Zombied PC is a computer that is infected by a Trojan and therefore under the control of someone else than the owner. The spyware that controls the Zombied PC can be used to launch DoS attacks as well as to spread adware. I talked about a DoS attack in my last blog when I explained the necessity of a business continuity and recovery plan. People who attack computer systems in these ways are also called “Phishers” and they are a serious threat as they continuously change their tactics.         

The final method to attack a system is called a botnet. A botnet is a huge amount of hijacked PC that has been set up to forward traffic, including spam and viruses over the internet. Although all kinds of attacks have to be taken serious, I personally think that botnets are a worst thing. I experienced to be part of such a botnet. The result was that my PC was running really slow all the time and after a while I was not able to sent emails anymore. The reason was that my IP-address was on a black list, probably because the people who run the botnet used my computer to send SPAM etc. As a result I had to delete my whole system and I had to install everything new. Luckily I did a backup before my PC was infected and my most important data were saved. According to a BBC article, botnets are a big danger and are growing in number. The difficulty is in detecting the people behind as well the actual size of the botnet. That’s why it is often a long process to get the people but as Detective Burls put it in the BBC interview, “They are complex investigations they're very time consuming, they cross international boundaries but we are making progress, they're very satisfying when you get a suspect before a court".

Source: 

- http://www.freedigitalphotos.net/images/view_photog.php?photogid=659">Image: Salvatore Vuono / FreeDigitalPhotos.net

-http://www.freedigitalphotos.net/images/view_photog.php?photogid=1152">Image: jscreationzs / FreeDigitalPhotos.net