Security threat

It can be defined as a threat to any element or action capable of undermining the security of information. Threats arise from the existence of vulnerabilities, that is, a threat can only exist if a vulnerability exists that can be exploited, regardless of whether the security of an information system is compromised or not. Various situations, such as the increase and improvement of social engineering techniques, the lack of training and awareness among users in the use of technology, and above all the increasing profitability of the attacks, have led in recent years to the increase of intentional threats.

Threat components:

Objectives

Active of the organization that could be attacked information (your confidentiality, integrity, availability), software, hardware, network service, system resource, etc.

Example: Software attack.

Agents

People or organizations that originate the threat, intentional or unintentional employees, former employees, hackers, commercial rivals, terrorists, criminals, general public, customers.

Example: Hackers (anonymous).

Events

Type of action that poses the threat improper use of authorized information, alteration of malicious / accidental information, destruction of malicious/accidental information, etc.

Example: Phising 

Types of threats

Trojan:

Malwares programs areable to be introduced into computers allowing access to external users, through a local or internét network, in order to control the computer or looting information without affecting the operation of it.

 

Worm:

It is a program very similar to a virus differentiating itself from the way it gets infected. The worms make copies of the computers themselves, infecting others and propagating automatically in a network independently of human action.

Computer virus:

Program created to copy and propagate itself, usually attached to applications. When an infected application is running, it can infect other files. Human action is needed for a virus to spread between machines and systems. This can be done by downloading files, exchanging disks and USB disks, copying files to and from file servers or sending infected e-mail attachments.

 

Spy:

is that which, without permission or awareness of their actions by an affected party, acquires private information for their own benefit or that of third parties.

Pharming:

Redirects the user to a false website with malicious intent by exploiting the DNS system, called DNS hijacking or poisoning.

Phising:

Phishing attacks rob users of personal information without their permission (mainly access to financial services). They use spam to spread. Once the mail arrives to the recipient, they try to trick users into providing personal data so that they can enter personal data from their bank account, such as their account number, password, social security number, etc.

Spam:

All unwanted mail received by the recipient, which comes from an automatic and massive sending by the one that issues it. The 'spam' is usually associated with personal email, but not only affects personal emails, but also forums, blogs and newsgroups.

Prevention 

1. Have an antivirus, either paid or free version. 

2. Do not open Mail from people who do not know the same server, the emails sent to the tray or spam, if you are going to open an email from these folders it will be better to have a good antivirus or trust the person or machine who sends it to you. 

3. Do not download pirated files that may have threats that look like our devices connected to the internet. 

4. Change operating system if you have Windows I recommend Linux, usually always the most used operating system is the one that is more likely to have threats, that is, it is more common. is that they have viruses; although you can also have a more used operating system and not have a virus since we have an antivirus. 

5. Do not enter pages you do not know always rectify the page in the navigation bar that you will enter for example www.vibra.fm this is the original but something like www.vibracolombia.fm then this is a fake page, always the companies have the real page they have for the users. 

6. Always look at the link that is in the social networks after seeing the header; Because there are not always true there are many pages that are spread with just one click is already in your profile and your friends or followers click and continue to spread sometimes chains are different times are threats to our team. 

7. Run the antivirus every time to analyze your files. 

8. Send your devices to a technician to review your files but this only if it is very slow or they are turned off all the time. 

9. Have the latest version of your antivirus, sometimes it is only updated or it asks for a confirmation for it. 

10. Use software from banks that can already do to have our computer "armored" so that we do not steal banking information.

If you want to learn more about it, please visit the next links: 

https://youtu.be/5DNcj5NZIjo