Computer security

Lore & Background

Computer security addresses vulnerabilities, which are flaws in the structure, execution, functioning, or internal oversight of a computer or system that compromise its security. Most documented vulnerabilities are recorded in the Common Vulnerabilities and Exposures (CVE) database. An exploitable vulnerability has at least one working exploit, and a threat is a potential negative action enabled by a vulnerability. Threat actors, often called hackers in popular media, may research, reverse-engineer, hunt, or exploit vulnerabilities using automated tools or customized scripts. Various types of attacks exist, including backdoors—secret methods of bypassing normal authentication—which may be added by authorized parties or by attackers using malware. Denial-of-service (DoS) attacks make a machine or network resource unavailable, and distributed denial-of-service (DDoS) attacks can originate from botnets or other techniques. Physical access attacks involve unauthorized users gaining physical access to a computer, while eavesdropping involves surreptitiously listening to private computer conversations, often over unsecured networks. Malware is any software code intentionally written to harm a computer system or its users, capable of leaking sensitive details, giving control to attackers, or corrupting data.

Reader's Guide

Computer security has become a critical concern as digital infrastructure becomes more embedded in everyday life. The complexity of modern information systems and the societal functions they underpin have introduced new vulnerabilities, particularly in systems managing essential services such as power grids, electoral processes, and finance. While many aspects involve digital security like passwords and encryption, physical security measures such as metal locks remain in use. IT security is not a perfect subset of information security and does not completely align with the security convergence schema. Different groups face different types of attacks: small and midsize businesses are most likely to be affected by malware, ransomware, phishing, man-in-the-middle attacks, and DoS attacks, while normal internet users are most likely to face untargeted attacks like phishing and ransomware. Backdoors are of greater concern to companies and databases than to individuals. Eavesdropping attacks are difficult to notice because they do not negatively affect network performance. Defending against DDoS attacks is much more difficult than blocking a single IP address. The field continues to evolve as attackers develop new methods and targets expand.

Did You Know?

• Most documented vulnerabilities are recorded in the Common Vulnerabilities and Exposures (CVE) database.
• A backdoor may be added by an authorized party for legitimate access or by an attacker for malicious reasons.
• Eavesdropping attacks are unlikely to negatively affect network performance, making them difficult to notice.