Summary

4 IT Essentials: PC Harware and Software Companion GuideDescribe Security ThreatsTo successfully protect computers and the network, a technician must understand both ofthe following types of threats to computer security:■■Physical: Events or attacks that steal, damage, or destroy such equipment as servers,switches, and wiring.Data: Events or attacks that remove, corrupt, deny access to, allow access to, or stealinformation.Threats to security can come from inside or outside an organization, and the level of potentialdamage can vary greatly. Potential threats include the following:■■Internal: Employees who have access to data, equipment, and the network. Internalattacks can be characterized as follows:■■Malicious threats are when an employee intends to cause damage.Accidental threats are when the user damages data or equipment unintentionally.External: Users outside an organization who do not have authorized access to the networkor resources. External attacks can be characterized as follows:■■Unstructured attacks, which use available resources, such as passwords or scripts,to gain access to and run programs designed to vandalize.Structured attacks, which use code to access operating systems and software.Physical loss or damage to equipment can be expensive, and data loss can be detrimental toyour business and reputation. Threats against data are constantly changing as attackers findnew ways to gain entry and commit their crimes.After completing this section, you will meet these objectives:■■■■■■■■Define viruses, worms, and Trojan horses.Explain web security.Define adware, spyware, and grayware.Explain denial of service.Describe spam and popups.Explain social engineering.Explain TCP/IP attacks.Explain hardware deconstruction and recycling.