Methods of Preventing Cyber Attacks

1. Antivirus / Anti-malware Software

Antivirus software detects, quarantines, and removes malware. It works by:

• Signature detection — comparing files against a database of known malware signatures (patterns)
• Heuristic analysis — detecting suspicious behaviour even if the malware is unknown (no signature match)

Antivirus software must be kept up to date so its signature database includes the latest threats.

2. Firewall

A firewall monitors incoming and outgoing network traffic and blocks unauthorised access based on predefined rules.

• Hardware firewall — a dedicated device placed between a network and the internet (protects the whole network)
• Software firewall — installed on individual computers (protects one device)

Firewalls use rules (e.g., block traffic on specific ports, from specific IP addresses) to allow or deny packets.

3. Encryption

Encryption converts data into an unreadable form (ciphertext) using a key. Even if data is intercepted, it cannot be read without the decryption key.

• HTTPS uses TLS/SSL to encrypt data in transit between browser and server
• End-to-end encryption — only the sender and intended recipient can decrypt messages
• Protects against man-in-the-middle attacks and eavesdropping

4. Strong Passwords

Strong passwords reduce the effectiveness of brute force attacks. Characteristics of a strong password:

• At least 8 characters (longer is better)
• Mix of upper and lowercase letters, numbers, and special characters
• Not based on personal information (name, date of birth)
• Unique for each account

5. Two-Factor Authentication (2FA)

Two-factor authentication requires users to provide two separate forms of verification before access is granted:

• Something you know — password or PIN
• Something you have — a code sent to your phone / hardware token
• Something you are — biometric (fingerprint, face recognition)

Even if a password is compromised, 2FA prevents unauthorised access without the second factor.

6. Access Levels / User Privileges

Access control limits what each user can do on a system. The principle of least privilege means giving users only the permissions they need for their job — reducing the damage any single account can cause if compromised.

7. Regular Software Updates and Patching

Software vulnerabilities are regularly discovered. Security patches fix these vulnerabilities. Keeping operating systems, antivirus, and applications updated closes known security holes before attackers can exploit them.

8. Penetration Testing

Penetration testing (pen testing) is where a security professional attempts to break into a system (with permission) to identify weaknesses before malicious attackers can exploit them.

9. SSL/TLS Certificates

SSL/TLS (Secure Sockets Layer / Transport Layer Security) provides an encrypted connection between a web server and a browser. Websites using HTTPS have an SSL/TLS certificate. This prevents eavesdropping and data tampering in transit.

Summary: Threat vs Prevention