How Unethical Hackers Can Hurt Your Systems
By Kevin Beaver

It's one thing to know that your systems generally are under threat from hackers around the world; it's another to understand specific attacks against your systems that are possible. This article offers information about some well-known types of attacks.

Question 1.
What is the article about?

a) operating systems
b) hackers from foreign countries
c) common threats to computers
d) famous hacker attacks

Many information-security vulnerabilities aren't critical by themselves. However, exploiting several vulnerabilities at the same time can cause a lot of damage. For example, a default Windows OS configuration, a weak SQL Server administrator password, and a server hosted on a wireless network may not be major security concerns separately. But exploiting all three of these vulnerabilities at the same time can be a serious danger for sensitive information.

Question 2.
Say if these statements are true or false:

a) A vulnerability in a system is a very dangerous thing.
b) The Windows default setup can make your computer vulnerable.
c) A password will protect important information.
d) All passwords are equally secure.
e) A server should never be hosted in a wireless network.

Question 3.
What is the main idea in the second paragraph?

a) Many system vulnerabilities are not as dangerous as people think. 
b) System vulnerabilities are more dangerous when they are combined.
c) System vulnerabilities are dangerous for sensitive information.

Nontechnical attacks

Exploits that involve manipulating people —end users and even yourself— are the greatest vulnerability within any computer or network infrastructure. Humans are trusting by nature, which can make them vulnerable to social-engineering. Social engineering is the exploitation of the trusting nature of human beings to gain information for malicious purposes.

Other common and effective attacks against information systems are physical. Hackers break into buildings, computer rooms, or other areas containing critical information or property to steal computers, servers, and other valuable equipment. Physical attacks can also include searching rubbish bins for intellectual property, passwords, network diagrams, and other information.

Question 4.
What is the biggest risk for a computer system?

a) Social engineering.
b) Physical attacks.
c) Information thrown away into a rubbish bin.

Question 5.
Which of these can be considered social engineering? (there are more than one)

a) Lending your computer to a work mate.
b) Sending an e-mail with your personal password to a friend who needs it to solve a problem with his own e-mail.
c) Breaking a window to steal a computer.
d) Throwing away a piece of paper with your password written on it.
e) Photocopying sensitive information.
f) Sharing personal data such as passwords with colleagues.
g) Sending your password to your boss when he/she asks for it in an e-mail.

Operating system attacks

Hacking operating systems (OSes) is a preferred method of the bad guys. OS attacks make up a large portion of hacker attacks simply because every computer has one and so many well-known exploits can be used against them.

Occasionally, some operating systems that appear to be more secure are attacked, and vulnerabilities are discovered. But hackers often prefer attacking operating systems such as Windows and Linux because they are widely used and better known for their weaknesses.

Question 6.
Which operating systems are more vulnerable?

a) Windows and Linux are the most vulnerable ones.
b) Windows and Linux are more vulnerable than others because they have more weaknesses.
c) They are all vulnerable, but it is easier for hackers to attack a well-known OS like Windows.
d) They are all vulnerable, but it is more profitable for hackers to attack a well-known OS like Windows.

Application and other specialized attacks

Applications suffer a lot of attacks by hackers. Programs such as e-mail server software and Web applications are often targeted:

- Hypertext Transfer Protocol (HTTP) and Simple Mail Transfer Protocol (SMTP) applications are frequently attacked because most firewalls and other security mechanisms are configured to allow full access to these services from the Internet.

- Voice over IP (VoIP) faces increasing attacks as it is used in more and more businesses.

Ethical hacking helps your security; it carries out such attacks against your computer systems and discovers any weaknesses in them.

Question 7.
Why are some programs vulnerable? (More than one answer is correct.)

a) Because they are attacked by hackers.
b) Because the firewall can't protect them.
c) Because they need free access to the Internet.
d) Because many networks are not protected by a firewall.
e) Because they are used in businesses.

Question 8.
What is ethical hacking?

a) It is a defence system against hackers.
b) It is a controlled attack to discover vulnerabilities in your system.
c) It is the only good thing about being attacked by a hacker.

Adapted from:
http://www.dummies.com/how-to/content/how-unethical-hackers-can-hurt-your-systems.html