As computers and the internet become more common place in our lives, unfortunately, so does the presence of online information predators. Individuals are vulnerable to the impact of computer viruses and identity theft. Businesses are potentially even more vulnerable, and on a larger scale. Every day, internet criminals introduce new viruses, worms and spyware that threaten a system's operating efficiencies and databases. But the worst security threats come from actual human beings. For a business, this can take the form of social engineering and ex-employees. Let's explore and explain these different threats.
A virus travels from to computer to computer by using an executable file. Although the file must be executed to activate the virus, unsuspecting people will often click on it and unleash it's harmful code. In a worst case scenario, viruses can destroy data permanently if they're not properly quarantined or erased. Unfortunately, it's not as simple as just removing a file by hitting the delete key. Often, the system's registry files are impacted, and the virus must be located and removed carefully so that crucial registry keys are not removed in the process.
A worm is a bigger security threat than a virus because is does not need an executable file in order to proliferate. In can be transported in a file, then can replicate itself, attach itself to other files and send itself via email to other computers. Worms can consume enough memory to bring a system to a halt, and they can allow remote access to your computer without your permission. If they go undetected, they can end up sending thousands of spam emails with you're company's email address as the sender. This could have a big negative impact on your company's reputation.
Trojans masquerade as useful software, and must be clicked to activate them. Although they don't replicate themselves or infect other files like worms, they can allow remote access to your computer without your knowledge.
Social engineering poses a much larger threat because it can't be prevented by using software or hardware. Social engineering is basically information theft carried out by humans by acquiring access from other humans to private or confidential information like credit card numbers and passwords, medical records or identification information. For example, a person posing as a retailer could call the customer service department of a credit card company and convince that employee to release a pin number for a credit card, unless the credit card company employee is trained well enough to effectively screen out the imposter.
Another human threat to computer security comes from employees and ex-employees. Laptops, desktop computers, software and printers which are not kept under lock and key can be stolen. Or if a system's security passwords are not changed frequently, they could be used to steal sensitive information.
The good news is that with proper security protocols in place, all of these security threats can be managed and minimized. Accutech International can help identify the security vulnerabilities, create a security plan, and install effective systems to implement it.