Advanced Tech

Threats and Risks, Point of Vulnerability

Identifies who can attack, what weakness they use, what is the chance of damage, and where the system is weak.

<h2> Detailed Explanation:

1. THREAT - Who / What can cause harm?

A threat is a potential danger to your computer/network.

4 Types of Threats:

a) Human Threats [90% of attacks]: - Insider: Angry employee deletes database, student copies lab papers.

- Outsider: Hacker, cyber criminal.

b) Malware Threats: - Virus, Worm, Trojan, Ransomware, Spyware.

c) Network Threats: - Eavesdropping, IP Spoofing, Man-in-the-Middle, DDoS.

d) Natural / Physical Threats: - Power failure, Fire, Flood, Hardware crash, Laptop theft.

2. RISK - What is the chance of loss?

Risk = If threat actually uses the vulnerability, how much loss will happen?

Formula :  Risk = Likelihood of Threat x Impact of Loss

Example: You use public WiFi without VPN. Threat = Hacker. Likelihood = High. Impact = Bank password stolen = High. So Risk = HIGH.

Types of Risk: - High Risk: No password on admin account.

- Medium Risk: No antivirus update for 1 month.

- Low Risk: Strong password but no 2FA.

How to reduce risk? - Avoid - Stop using open WiFi

- Mitigate - Install Firewall

- Transfer - Take cyber insurance

- Accept - Accept small risk

3. POINT OF VULNERABILITY [POV] - Where is the system weak?

POV is the exact weak point where attacker enters. This is most important for finding and fixing.

Main Points of Vulnerability in Computer & Network:

a) Technical Vulnerability: - Weak passwords like 123456, admin - Unpatched OS - Windows not updated

- Open Ports - Port 23, 80 open

- No Firewall / No Antivirus

- Software bug

b) Network Vulnerability: - No encryption - HTTP instead of HTTPS

- Weak WiFi password - WEP instead of WPA3

- No VPN on remote access

- Email with no spam filter - Phishing comes in

c) Human Vulnerability - Biggest POV: - Clicking on phishing link

- Sharing OTP/password

- Using same password everywhere

- No security awareness training

</h2>