IGCSE1.5.3Paper 1 — Computer Systems

Cyber Security

The threats you must be able to name, and the matching protection for each.

YOU SHOULD BE ABLE TO

Describe brute-force attack, data interception, DDoS, hacking, malware, phishing, pharming and social engineering.
Describe how each threat can be prevented or reduced.
Describe the types of malware: virus, worm, trojan horse, spyware, adware, ransomware.
Describe access levels, anti-malware, authentication, automatic updates, firewalls, privacy settings and proxy servers.

Keeping data locked away is only part of securityGeorgeTan#3 - OFF permanently · PDM 1.0

SORT THEM

Match each description to the threat it describes.

PICK ONE, THEN PICK ITS GROUP

Phishing

empty

Pharming

empty

Brute-force attack

empty

Denial of service

empty

Data interception

empty

//Threat → prevention, as a pair

Exams almost always want the matching protection, so learn them together.

Brute-force      -> strong passwords, lock after N attempts, 2FA
Data interception-> encryption, use WPA/WPA2, avoid public Wi-Fi
DDoS             -> firewall, proxy server, traffic filtering
Hacking          -> firewalls, strong passwords, access levels
Malware          -> anti-malware software, automatic updates
Phishing         -> do not click unknown links, spam filters
Pharming         -> anti-malware, check the URL, check for HTTPS
Social engineer. -> staff training, be suspicious of urgency

//Phishing vs pharming

Phishing needs you to click: a fake email or message tempts you to a fake site. Pharming does not: malicious code redirects you to the fake site even when you type the correct address. That difference is the mark.

//The malware family

Virus attaches to a file and needs to be run. Worm spreads by itself across a network. Trojan pretends to be useful software. Spyware records what you do, including keystrokes. Adware floods you with adverts. Ransomware encrypts your files and demands payment.

IN THE EXAM

Two-factor authentication = something you know plus something you have. Say both halves.
A firewall monitors traffic in and out and blocks anything against its rules — that phrasing earns the mark.

CHECK YOURSELF

1.What is the difference between phishing and pharming?

2.Which malware ENCRYPTS your files and demands payment?

3.What does a firewall actually do?