{"id":83,"date":"2020-11-09T05:51:56","date_gmt":"2020-11-09T05:51:56","guid":{"rendered":"http:\/\/learnlearn.uk\/igcsecs\/?page_id=83"},"modified":"2022-01-25T05:06:50","modified_gmt":"2022-01-25T05:06:50","slug":"internet-threats","status":"publish","type":"page","link":"https:\/\/learnlearn.uk\/igcsecs\/internet-threats\/","title":{"rendered":"Internet Threats"},"content":{"rendered":"<div class=\"responsive-tabs\">\n<h2 class=\"tabtitle\">Phishing<\/h2>\n<div class=\"tabcontent\">\n\n<h3>Phishing<\/h3>\n<p><a href=\"https:\/\/learnlearn.uk\/gcsecs\/wp-content\/uploads\/sites\/8\/2018\/01\/phishing.jpg\"><img decoding=\"async\" loading=\"lazy\" class=\"alignright size-full wp-image-874\" src=\"https:\/\/learnlearn.uk\/gcsecs\/wp-content\/uploads\/sites\/8\/2018\/01\/phishing.jpg\" alt=\"\" width=\"279\" height=\"181\" \/><\/a><\/p>\n<p>Phishing is a very common form of attack, using using emails. Attackers send emails purporting to be from organisations such as banks and ecommerce sites, with the aim of tricking users in to clicking on the email links and divulging personal information, especially:<\/p>\n<ul>\n<li>Usernames<\/li>\n<li>Passwords<\/li>\n<li>Credit \/ Debit card information<\/li>\n<\/ul>\n<p>Detecting Phishing Emails<\/p>\n<p>Phishing emails are often quite easy to spot, especially if look closely at the email:<\/p>\n<ul>\n<li>The email often doesn&#8217;t contain your real name \/ username, just &#8216;Dear Sir\/Madam&#8217;<\/li>\n<li>The email often has multiple spelling\/grammar errors<\/li>\n<li>The email address domain is different to the company email domain.\u00a0 \u00a0 e.g.\u00a0 no-reply@ammazon.com no-reply@amazon.com<\/li>\n<li>The email usually contains an urgent message that is designed to trick you into acting before you think properly about it.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n\n<\/div><h2 class=\"tabtitle\">People<\/h2>\n<div class=\"tabcontent\">\n\n<h3>Social Engineering ( People)<\/h3>\n<p><a href=\"https:\/\/learnlearn.uk\/gcsecs\/wp-content\/uploads\/sites\/8\/2018\/01\/socialengineering.jpg\"><img decoding=\"async\" loading=\"lazy\" class=\"alignright size-full wp-image-870\" src=\"https:\/\/learnlearn.uk\/gcsecs\/wp-content\/uploads\/sites\/8\/2018\/01\/socialengineering.jpg\" alt=\"\" width=\"291\" height=\"173\" \/><\/a><\/p>\n<p>Social engineering covers a wide range of attacks where people are tricked in to divulging personal information or harming \/compromising a system.<\/p>\n<div class=\"nv-iframe-embed\">\n<div class=\"container-lazyload preview-lazyload container-youtube js-lazyload--not-loaded\"><a href=\"https:\/\/youtu.be\/5ZqNX6YeH6c\" class=\"lazy-load-youtube preview-lazyload preview-youtube\" data-video-title=\"What is social engineering?\" title=\"Play video &quot;What is social engineering?&quot;\">https:\/\/youtu.be\/5ZqNX6YeH6c<\/a><noscript>Video can&#8217;t be loaded because JavaScript is disabled: <a href=\"https:\/\/youtu.be\/5ZqNX6YeH6c\" title=\"What is social engineering?\">What is social engineering? (https:\/\/youtu.be\/5ZqNX6YeH6c)<\/a><\/noscript><\/div>\n<\/div>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n\n<\/div><h2 class=\"tabtitle\">Brute Force<\/h2>\n<div class=\"tabcontent\">\n\n<h3>Brute Force Attacks<\/h3>\n<p><a href=\"https:\/\/learnlearn.uk\/gcsecs\/wp-content\/uploads\/sites\/8\/2018\/01\/password.jpg\"><img decoding=\"async\" loading=\"lazy\" class=\"alignright size-full wp-image-869\" src=\"https:\/\/learnlearn.uk\/gcsecs\/wp-content\/uploads\/sites\/8\/2018\/01\/password.jpg\" alt=\"\" width=\"268\" height=\"188\" \/><\/a><br \/>\nThis is useful again systems where either the website \/ system allows unlimited login attempts. The attacker keeps trying every possible password combination until they are successful. This form of attack is usually combined with a dictionary attack and is especially effective where short or common passwords are used (e.g. password123)<\/p>\n<p>Defending against brute force attacks<\/p>\n<ul>\n<li>Force users to user a longer and more complex password<\/li>\n<li>Limit login attempts to a site<\/li>\n<li>Never use common usernames like &#8216;admin&#8217; when setting up a website<\/li>\n<\/ul>\n<p><strong>Activity<\/strong><\/p>\n<p>See how long it would take for your favourite password to be hacked using the following site:<\/p>\n<p><a href=\"https:\/\/random-ize.com\/how-long-to-hack-pass\/\">https:\/\/random-ize.com\/how-long-to-hack-pass\/<\/a><\/p>\n<p><a href=\"https:\/\/howsecureismypassword.net\/\">https:\/\/howsecureismypassword.net\/<\/a><\/p>\n<p>&nbsp;<\/p>\n\n<\/div><h2 class=\"tabtitle\">DOS<\/h2>\n<div class=\"tabcontent\">\n\n<h3>DOS\/ DDOS &#8211; denial of service attacks \/ Distributed Denial Of Service Attacks<\/h3>\n<p><a href=\"https:\/\/learnlearn.uk\/gcsecs\/wp-content\/uploads\/sites\/8\/2018\/01\/ddos.png\"><img decoding=\"async\" loading=\"lazy\" class=\"alignright size-medium wp-image-871\" src=\"https:\/\/learnlearn.uk\/gcsecs\/wp-content\/uploads\/sites\/8\/2018\/01\/ddos-300x203.png\" alt=\"\" width=\"300\" height=\"203\" \/><\/a><\/p>\n<p>Often an objective of attackers is to shut down a webserver or website. A simple way of achieving this is to overload the site with thousands and thousands of requests for data. The server is overloaded with requests and it crashes. This is known as a <strong>Denial Of Service Attack.(DOS)<\/strong><\/p>\n<p>In order to defend attack such an attack, webservers often block requests from an IP address if it starts to send too many requests. The only way to circumvent this defence is to attack the server from many machines, in many locations at once. This can only be achieved if you first find a vulnerability in client computers (or more recently Internet Connected Devices like webcams, Network Attached Storage, Smart devices). You take control of these devices and turn them in to a large <strong>BOTNET,<\/strong> getting thousands or millions of hacked devices to send requests to the intended target. This type of attack of known as a <strong>Distributed Denial of Service Attack.<\/strong><\/p>\n\n<\/div><h2 class=\"tabtitle\">Interception<\/h2>\n<div class=\"tabcontent\">\n\n<h3>Data interception and Theft<\/h3>\n<p><a href=\"https:\/\/learnlearn.uk\/gcsecs\/wp-content\/uploads\/sites\/8\/2018\/01\/wifi.png\"><img decoding=\"async\" loading=\"lazy\" class=\"alignright size-medium wp-image-872\" src=\"https:\/\/learnlearn.uk\/gcsecs\/wp-content\/uploads\/sites\/8\/2018\/01\/wifi-277x300.png\" alt=\"\" width=\"277\" height=\"300\" \/><\/a><\/p>\n<p>With the widespread adoption of WIFI in offices around the world, data interception has become widespread. Encrypted packets can be sniffed, and given enough packets and time, the WIFI encryption key can be computed and access to the network can be obtained. This is especially effective against older, weaker encryption technologies, for example WEP (Wired Equivalent Privacy)<\/p>\n<p><strong>Combating data interception<\/strong><\/p>\n<ul>\n<li>Change your passwords regularly<\/li>\n<li>Use strong modern encryption like WPA2<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n\n<\/div><h2 class=\"tabtitle\">Injection<\/h2>\n<div class=\"tabcontent\">\n\n<h3>SQL Injection<\/h3>\n<p><a href=\"https:\/\/learnlearn.uk\/gcsecs\/wp-content\/uploads\/sites\/8\/2018\/01\/bobby-tables.png\"><img decoding=\"async\" loading=\"lazy\" class=\"size-full wp-image-867 aligncenter\" src=\"https:\/\/learnlearn.uk\/gcsecs\/wp-content\/uploads\/sites\/8\/2018\/01\/bobby-tables.png\" alt=\"\" width=\"666\" height=\"205\" \/><\/a><\/p>\n<p>An SQL Injection works by taking advantage of poor programming discipline while programming using SQL databases.<\/p>\n<p>If user inputs are not sanitized (checked to make sure no illegal input has been entered) before processing, then an attacker can inject their own SQL statements in to the system.<\/p>\n<p><strong>Weak Python\/SQL Code Example<\/strong><\/p>\n<ul>\n<li>fname = input(&#8220;What&#8217;s you first name?&#8221;)<\/li>\n<li>lname = input(&#8220;What&#8217;s your last name?&#8221;)<\/li>\n<li>c.execute(&#8220;INSERT INTO STUDENTS VALUES(&#8216;&#8221;+ fname + &#8220;&#8216;,'&#8221;+lname+&#8221;&#8216;);&#8221;)<\/li>\n<\/ul>\n<p>In the example above the user input on lines 1 and 2 are directed added to the SQL statement using string concatenation, this allows the attack shown in the cartoon above to take place.<\/p>\n<p><strong>Strong Python\/SQL Code Example<\/strong><\/p>\n<ul>\n<li>fname = input(&#8220;What&#8217;s you first name?&#8221;)<\/li>\n<li>lname = input(&#8220;What&#8217;s your last name?&#8221;)<\/li>\n<li>entry = (fname,lname)<\/li>\n<li>c.execute(&#8220;INSERT INTO STUDENTS VALUES(?,?);&#8221;,entry)<\/li>\n<\/ul>\n<p>In the example above the user input is first added to a tuple and then passed to execute function as an function parameter. This input is then sanitized internally within the execute function before being passed to the SQL query for processing.<\/p>\n<p>&nbsp;<\/p>\n\n<\/div><h2 class=\"tabtitle\"> Network Policy<\/h2>\n<div class=\"tabcontent\">\n\n<h3>Poor Network Policy<\/h3>\n<p>When network administrators set up the network policy, they may implement poor policies which allow a vector of attack by attack by hackers.<\/p>\n<p>Examples include:<\/p>\n<ul>\n<li>Allowing weak passwords<\/li>\n<li>Not compartmentalizing data access<\/li>\n<li>Not running network penetration tests \/ a security audit<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n\n<\/div><h2 class=\"tabtitle\">Resources<\/h2>\n<div class=\"tabcontent\">\n\n<h3>Resources<\/h3>\n<p><strong>Past Paper Questions<\/strong><\/p>\n<p><a href=\"https:\/\/pastpapers.papacambridge.com\/viewer\/caie\/cambridge-upper-secondary-igcse-computer-science-0478-2015-jun-0478-s15-qp-11-pdf\">0478\/11 Paper 1 Theory May\/June 2015 &#8211; Qn 6<\/a><\/p>\n<p><a href=\"https:\/\/pastpapers.papacambridge.com\/viewer\/caie\/cambridge-upper-secondary-igcse-computer-science-0478-2015-jun-0478-s15-qp-12-pdf\">0478\/12 Paper 1 Theory May\/June 2015 &#8211; Qn1<\/a><\/p>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Phishing Phishing is a very common form of attack, using using emails. Attackers send emails purporting to be from organisations such as banks and ecommerce sites, with the aim of tricking users in to clicking on the email links and divulging personal information, especially: Usernames Passwords Credit \/ Debit card information Detecting Phishing Emails Phishing&hellip;&nbsp;<a href=\"https:\/\/learnlearn.uk\/igcsecs\/internet-threats\/\" class=\"\" rel=\"bookmark\">Read More &raquo;<span class=\"screen-reader-text\">Internet Threats<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":70,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":""},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Internet Threats | IGCSE Computer Science | Learnlearn.uk<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/learnlearn.uk\/igcsecs\/internet-threats\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Internet Threats | IGCSE Computer Science | Learnlearn.uk\" \/>\n<meta property=\"og:description\" content=\"Phishing Phishing is a very common form of attack, using using emails. Attackers send emails purporting to be from organisations such as banks and ecommerce sites, with the aim of tricking users in to clicking on the email links and divulging personal information, especially: Usernames Passwords Credit \/ Debit card information Detecting Phishing Emails Phishing&hellip;&nbsp;Read More &raquo;Internet Threats\" \/>\n<meta property=\"og:url\" content=\"https:\/\/learnlearn.uk\/igcsecs\/internet-threats\/\" \/>\n<meta property=\"og:site_name\" content=\"IGCSE Computer Science\" \/>\n<meta property=\"article:modified_time\" content=\"2022-01-25T05:06:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/learnlearn.uk\/gcsecs\/wp-content\/uploads\/sites\/8\/2018\/01\/phishing.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/learnlearn.uk\/igcsecs\/internet-threats\/\",\"url\":\"https:\/\/learnlearn.uk\/igcsecs\/internet-threats\/\",\"name\":\"Internet Threats | IGCSE Computer Science | Learnlearn.uk\",\"isPartOf\":{\"@id\":\"https:\/\/learnlearn.uk\/igcsecs\/#website\"},\"datePublished\":\"2020-11-09T05:51:56+00:00\",\"dateModified\":\"2022-01-25T05:06:50+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/learnlearn.uk\/igcsecs\/internet-threats\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/learnlearn.uk\/igcsecs\/internet-threats\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/learnlearn.uk\/igcsecs\/internet-threats\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"IGCSE Computer Science Course\",\"item\":\"https:\/\/learnlearn.uk\/igcsecs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Internet Threats\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/learnlearn.uk\/igcsecs\/#website\",\"url\":\"https:\/\/learnlearn.uk\/igcsecs\/\",\"name\":\"IGCSE Computer Science\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/learnlearn.uk\/igcsecs\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/learnlearn.uk\/igcsecs\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/learnlearn.uk\/igcsecs\/#organization\",\"name\":\"IGCSE Computer Science\",\"url\":\"https:\/\/learnlearn.uk\/igcsecs\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/learnlearn.uk\/igcsecs\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/learnlearn.uk\/igcsecs\/wp-content\/uploads\/sites\/23\/2020\/08\/LearnLearnLogowhitenew.png\",\"contentUrl\":\"https:\/\/learnlearn.uk\/igcsecs\/wp-content\/uploads\/sites\/23\/2020\/08\/LearnLearnLogowhitenew.png\",\"width\":710,\"height\":98,\"caption\":\"IGCSE Computer Science\"},\"image\":{\"@id\":\"https:\/\/learnlearn.uk\/igcsecs\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Internet Threats | IGCSE Computer Science | Learnlearn.uk","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/learnlearn.uk\/igcsecs\/internet-threats\/","og_locale":"en_GB","og_type":"article","og_title":"Internet Threats | IGCSE Computer Science | Learnlearn.uk","og_description":"Phishing Phishing is a very common form of attack, using using emails. Attackers send emails purporting to be from organisations such as banks and ecommerce sites, with the aim of tricking users in to clicking on the email links and divulging personal information, especially: Usernames Passwords Credit \/ Debit card information Detecting Phishing Emails Phishing&hellip;&nbsp;Read More &raquo;Internet Threats","og_url":"https:\/\/learnlearn.uk\/igcsecs\/internet-threats\/","og_site_name":"IGCSE Computer Science","article_modified_time":"2022-01-25T05:06:50+00:00","og_image":[{"url":"https:\/\/learnlearn.uk\/gcsecs\/wp-content\/uploads\/sites\/8\/2018\/01\/phishing.jpg"}],"twitter_card":"summary_large_image","twitter_misc":{"Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/learnlearn.uk\/igcsecs\/internet-threats\/","url":"https:\/\/learnlearn.uk\/igcsecs\/internet-threats\/","name":"Internet Threats | IGCSE Computer Science | Learnlearn.uk","isPartOf":{"@id":"https:\/\/learnlearn.uk\/igcsecs\/#website"},"datePublished":"2020-11-09T05:51:56+00:00","dateModified":"2022-01-25T05:06:50+00:00","breadcrumb":{"@id":"https:\/\/learnlearn.uk\/igcsecs\/internet-threats\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/learnlearn.uk\/igcsecs\/internet-threats\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/learnlearn.uk\/igcsecs\/internet-threats\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"IGCSE Computer Science Course","item":"https:\/\/learnlearn.uk\/igcsecs\/"},{"@type":"ListItem","position":2,"name":"Internet Threats"}]},{"@type":"WebSite","@id":"https:\/\/learnlearn.uk\/igcsecs\/#website","url":"https:\/\/learnlearn.uk\/igcsecs\/","name":"IGCSE Computer Science","description":"","publisher":{"@id":"https:\/\/learnlearn.uk\/igcsecs\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/learnlearn.uk\/igcsecs\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/learnlearn.uk\/igcsecs\/#organization","name":"IGCSE Computer Science","url":"https:\/\/learnlearn.uk\/igcsecs\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/learnlearn.uk\/igcsecs\/#\/schema\/logo\/image\/","url":"https:\/\/learnlearn.uk\/igcsecs\/wp-content\/uploads\/sites\/23\/2020\/08\/LearnLearnLogowhitenew.png","contentUrl":"https:\/\/learnlearn.uk\/igcsecs\/wp-content\/uploads\/sites\/23\/2020\/08\/LearnLearnLogowhitenew.png","width":710,"height":98,"caption":"IGCSE Computer Science"},"image":{"@id":"https:\/\/learnlearn.uk\/igcsecs\/#\/schema\/logo\/image\/"}}]}},"rttpg_featured_image_url":null,"rttpg_author":{"display_name":"learnlearnadmin","author_link":"https:\/\/learnlearn.uk\/igcsecs\/author\/learnlearnadmin\/"},"rttpg_comment":0,"rttpg_category":null,"rttpg_excerpt":"Phishing Phishing is a very common form of attack, using using emails. Attackers send emails purporting to be from organisations such as banks and ecommerce sites, with the aim of tricking users in to clicking on the email links and divulging personal information, especially: Usernames Passwords Credit \/ Debit card information Detecting Phishing Emails Phishing&hellip;&nbsp;Read&hellip;","_links":{"self":[{"href":"https:\/\/learnlearn.uk\/igcsecs\/wp-json\/wp\/v2\/pages\/83"}],"collection":[{"href":"https:\/\/learnlearn.uk\/igcsecs\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/learnlearn.uk\/igcsecs\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/learnlearn.uk\/igcsecs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/learnlearn.uk\/igcsecs\/wp-json\/wp\/v2\/comments?post=83"}],"version-history":[{"count":4,"href":"https:\/\/learnlearn.uk\/igcsecs\/wp-json\/wp\/v2\/pages\/83\/revisions"}],"predecessor-version":[{"id":659,"href":"https:\/\/learnlearn.uk\/igcsecs\/wp-json\/wp\/v2\/pages\/83\/revisions\/659"}],"wp:attachment":[{"href":"https:\/\/learnlearn.uk\/igcsecs\/wp-json\/wp\/v2\/media?parent=83"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}