Hacking is gaining unauthorised access to computer systems or networks to gain control, steal information or cause damage.

Name three weaknesses a hacker looks for.

A hacker looks for unpatched software , out-of-date anti-malware and weak passwords .

True or False? The only consequence of hacking is financial loss.

False. Hacking can also cause data breaches , the installation of malware , data loss and identity theft .

Phishing is a form of social engineering in which fraudulent, legitimate-looking emails are sent to a large number of addresses, claiming to be from a reputable company, to gain access to a user's details.

Give two ways an organisation can prevent phishing.

Phishing can be prevented by anti-spam filters , training staff to recognise fraudulent emails, and user access levels that stop staff opening file types such as .exe and .bat files.

Pharming is when a user types a website address into a browser and is redirected to a fake website designed to trick them into entering sensitive information.

True or False? In a pharming attack the user is tricked into clicking a link in an email.

False. The user types the address themselves; the attacker alters DNS settings or the user's browser settings to redirect them to the fraudulent website.

What is the difference between smishing and vishing?

Smishing uses SMS messages and vishing uses fraudulent phone calls , but both are forms of phishing used to obtain personal information.

Give two ways to protect yourself from smishing and vishing.

Do not click links in unsolicited text messages , never share personal information over the phone unless you initiated the call , verify the caller's identity independently, and check the sender's number carefully for anything suspicious.

Malware is any software created with malicious intent to cause harm to a computer system.

What makes a computer virus different from other malware?

A computer virus can replicate itself on a user's computer, and contains code that causes unwanted and unexpected events.

How does a Trojan get onto a computer?

A Trojan disguises itself as legitimate software while containing malicious code in the background.

Spyware is software that allows a person to spy on a user's activities , recording the screen and logging keystrokes to gain access to passwords.

Name the three main methods of card fraud.

The three main methods of card fraud are shoulder surfing , card cloning and keylogging .

Card cloning is the copying of data from a credit or debit card by scanning the through a skimmer machine.

Card cloning is the copying of data from a credit or debit card by scanning the magnetic strip through a skimmer machine.

Keylogging is software installed to detect and store keystrokes from the keyboard and send the data back to the criminal.

How can data be held securely?

Data can be held securely by storing it in an encrypted format and ensuring authentication is used, so that only trusted sources can access it.

Name four ways of storing data securely.

Data can be stored securely using biometrics , a digital certificate , SSL , encryption , a firewall , two-factor authentication , and usernames and passwords .

Biometrics is a way of authenticating a user by their unique human characteristics .

Give three examples of biometrics.

Examples are fingerprint scans , retina scans and facial recognition .

Give two benefits of using biometrics.

Biometric data is unique to the person and difficult to copy or forge , it is always with the person , and it eliminates attacks such as shoulder surfing and key-logging .

Give two drawbacks of using biometrics.

Collecting biometric data can be intrusive , scans may not be recognised , retina and iris recognition is expensive to install , and low light, hats or glasses cause problems for facial recognition.

Define digital certificate .

A digital certificate is a digital file used to prove who stores the public key .

Name three things a digital certificate contains.

A digital certificate contains the public key , subject information , issuer information , a validity period , a serial number , the signature algorithm and the digital signature .

Who issues digital certificates?

Digital certificates are issued by trusted companies , known as certificate authorities (CAs) , to ensure they are real and safe.

Define Secure Socket Layer (SSL) .

SSL is a security protocol used to encrypt data transmitted over the internet , helping to prevent eavesdropping and other forms of interception .

How does SSL use a digital certificate?

SSL sends a digital certificate to the user's browser . The certificate contains the public key , which is used for authentication , and once it is authenticated the transaction begins.

True or False? A digital certificate and SSL are the same thing.

False. A digital certificate is the file that proves who holds the public key . SSL is the security protocol that encrypts the data and sends the certificate to the browser.

Encryption is a method of converting plain text into ciphered text , using complex mathematical algorithms to scramble the text.

Asymmetric encryption is also known as private key, key encryption.

Asymmetric encryption is also known as private key, public key encryption.

True or False? Encryption prevents attacks on a network from happening.

False. Encryption does not prevent the attacks from occurring , but it does stop the attacker from gaining access to the information .

A firewall is a barrier between a network and the internet that prevents unwanted traffic entering by filtering requests to ensure they are legitimate.

What is the difference between a hardware and a software firewall?

A hardware firewall protects the whole network , while a software firewall protects individual devices , monitoring the data going to and from each computer.

Name two attacks a firewall helps to prevent.

A firewall helps prevent hackers , malware , unauthorised access to a network and DoS/DDoS attacks .

Define two-factor authentication (2FA) .

Two-factor authentication is a security measure that requires users to provide two separate forms of identification to verify their identity.

True or False? Entering two different passwords is two-factor authentication.

False. 2FA combines something the user knows , such as a password, with something the user has , such as a code sent to a smartphone or an authenticator application.

What are the two stages of two-factor authentication?

First the user enters a username and password or PIN , then the user enters a one-time unique PIN sent to their mobile device .

Why are passwords stored as encrypted text in a database?

So that even with unauthorised access to the database , a hacker would not be able to read the individual passwords of users.

What makes a strong password?

A strong password uses a combination of uppercase and lowercase letters , numbers and special characters , and is changed regularly .

Give one disadvantage of using passwords.

Complex passwords are harder to remember , having too many passwords is difficult, and hackers can break most passwords using brute force attacks .

Which law covers copyright?

Copyright is covered by the Copyright, Designs and Patents Act .

What does the Copyright, Designs and Patents Act protect?

It protects the intellectual property of an individual or a company.

What three actions does copyright make illegal without permission?

It is illegal to copy , modify or distribute software or other intellectual property without the relevant permission.

True or False? You must apply for copyright before your original work is protected.

False. If work is original, copyright is automatically applied .

How long does copyright last?

Copyright does not expire until 25 to 70 years from the death of the creator , depending on the type of work.

Whose responsibility is it to take action if work has been copied?

It is the responsibility of the individual whose work was copied to take action under the Copyright, Designs and Patents Act.

Name three primary breaches of the Copyright, Designs and Patents Act.

Primary breaches are copying an original work , issuing a copy to the public , renting or lending a copy to the public , performing, showing or playing the work in public , and making an adaptation of it.

Name two secondary breaches of the Copyright, Designs and Patents Act.

Secondary breaches are importing a copy , possessing or dealing with a copy , providing the means to make copies , permitting the use of premises for making copies, and providing equipment for a performance of a copy.

Define software piracy .

Software piracy is the illegal copying and distribution of software .

Name three methods companies use to prevent software piracy.

Companies use a product key or licence , an agreement of terms and conditions before installation, and holograms on the packaging. Some older software would only run with the CD-ROM or memory stick physically in the device .

How does a hologram show that software is genuine?

Holograms are too difficult and costly for pirates to implement , so packaging without one is usually an illegal copy .

IGCSEICTCambridge (CIE)Flashcards6. Safety & SecuritySecurity

Security (Cambridge (CIE) IGCSE ICT): Flashcards

Exam code: 0417 & 0983

1/54

0Still learning

Know0

FrontThreats to Data
Define hacking.

Was this flashcard helpful?

Cards in this collection (54)

Define hacking.
Hacking is gaining unauthorised access to computer systems or networks to gain control, steal information or cause damage.
Name three weaknesses a hacker looks for.
A hacker looks for unpatched software, out-of-date anti-malware and weak passwords.
True or False?
The only consequence of hacking is financial loss.
False.
Hacking can also cause data breaches, the installation of malware, data loss and identity theft.
Define phishing.
Phishing is a form of social engineering in which fraudulent, legitimate-looking emails are sent to a large number of addresses, claiming to be from a reputable company, to gain access to a user's details.
Give two ways an organisation can prevent phishing.
Phishing can be prevented by anti-spam filters, training staff to recognise fraudulent emails, and user access levels that stop staff opening file types such as .exe and .bat files.
Define pharming.
Pharming is when a user types a website address into a browser and is redirected to a fake website designed to trick them into entering sensitive information.
True or False?
In a pharming attack the user is tricked into clicking a link in an email.
False.
The user types the address themselves; the attacker alters DNS settings or the user's browser settings to redirect them to the fraudulent website.
What is the difference between smishing and vishing?
Smishing uses SMS messages and vishing uses fraudulent phone calls, but both are forms of phishing used to obtain personal information.
Give two ways to protect yourself from smishing and vishing.
Do not click links in unsolicited text messages, never share personal information over the phone unless you initiated the call, verify the caller's identity independently, and check the sender's number carefully for anything suspicious.
Define malware.
Malware is any software created with malicious intent to cause harm to a computer system.
What makes a computer virus different from other malware?
A computer virus can replicate itself on a user's computer, and contains code that causes unwanted and unexpected events.
How does a Trojan get onto a computer?
A Trojan disguises itself as legitimate software while containing malicious code in the background.
Define spyware.
Spyware is software that allows a person to spy on a user's activities, recording the screen and logging keystrokes to gain access to passwords.
Name the three main methods of card fraud.
The three main methods of card fraud are shoulder surfing, card cloning and keylogging.
Card cloning is the copying of data from a credit or debit card by scanning the through a skimmer machine.
Card cloning is the copying of data from a credit or debit card by scanning the magnetic strip through a skimmer machine.
Define keylogging.
Keylogging is software installed to detect and store keystrokes from the keyboard and send the data back to the criminal.
How can data be held securely?
Data can be held securely by storing it in an encrypted format and ensuring authentication is used, so that only trusted sources can access it.
Name four ways of storing data securely.
Data can be stored securely using biometrics, a digital certificate, SSL, encryption, a firewall, two-factor authentication, and usernames and passwords.
Define biometrics.
Biometrics is a way of authenticating a user by their unique human characteristics.
Give three examples of biometrics.
Examples are fingerprint scans, retina scans and facial recognition.
Give two benefits of using biometrics.
Biometric data is unique to the person and difficult to copy or forge, it is always with the person, and it eliminates attacks such as shoulder surfing and key-logging.
Give two drawbacks of using biometrics.
Collecting biometric data can be intrusive, scans may not be recognised, retina and iris recognition is expensive to install, and low light, hats or glasses cause problems for facial recognition.
Define digital certificate.
A digital certificate is a digital file used to prove who stores the public key.
Name three things a digital certificate contains.
A digital certificate contains the public key, subject information, issuer information, a validity period, a serial number, the signature algorithm and the digital signature.
Who issues digital certificates?
Digital certificates are issued by trusted companies, known as certificate authorities (CAs), to ensure they are real and safe.
Define Secure Socket Layer (SSL).
SSL is a security protocol used to encrypt data transmitted over the internet, helping to prevent eavesdropping and other forms of interception.
How does SSL use a digital certificate?
SSL sends a digital certificate to the user's browser. The certificate contains the public key, which is used for authentication, and once it is authenticated the transaction begins.
True or False?
A digital certificate and SSL are the same thing.
False.
A digital certificate is the file that proves who holds the public key. SSL is the security protocol that encrypts the data and sends the certificate to the browser.
Define encryption.
Encryption is a method of converting plain text into ciphered text, using complex mathematical algorithms to scramble the text.
Asymmetric encryption is also known as private key, key encryption.
Asymmetric encryption is also known as private key, public key encryption.
True or False?
Encryption prevents attacks on a network from happening.
False.
Encryption does not prevent the attacks from occurring, but it does stop the attacker from gaining access to the information.
Define firewall.
A firewall is a barrier between a network and the internet that prevents unwanted traffic entering by filtering requests to ensure they are legitimate.
What is the difference between a hardware and a software firewall?
A hardware firewall protects the whole network, while a software firewall protects individual devices, monitoring the data going to and from each computer.
Name two attacks a firewall helps to prevent.
A firewall helps prevent hackers, malware, unauthorised access to a network and DoS/DDoS attacks.
Define two-factor authentication (2FA).
Two-factor authentication is a security measure that requires users to provide two separate forms of identification to verify their identity.
True or False?
Entering two different passwords is two-factor authentication.
False.
2FA combines something the user knows, such as a password, with something the user has, such as a code sent to a smartphone or an authenticator application.
What are the two stages of two-factor authentication?
First the user enters a username and password or PIN, then the user enters a one-time unique PIN sent to their mobile device.
Why are passwords stored as encrypted text in a database?
So that even with unauthorised access to the database, a hacker would not be able to read the individual passwords of users.
What makes a strong password?
A strong password uses a combination of uppercase and lowercase letters, numbers and special characters, and is changed regularly.
Give one disadvantage of using passwords.
Complex passwords are harder to remember, having too many passwords is difficult, and hackers can break most passwords using brute force attacks.
Which law covers copyright?
Copyright is covered by the Copyright, Designs and Patents Act.
What does the Copyright, Designs and Patents Act protect?
It protects the intellectual property of an individual or a company.
What three actions does copyright make illegal without permission?
It is illegal to copy, modify or distribute software or other intellectual property without the relevant permission.
True or False?
You must apply for copyright before your original work is protected.
False.
If work is original, copyright is automatically applied.
How long does copyright last?
Copyright does not expire until 25 to 70 years from the death of the creator, depending on the type of work.
Whose responsibility is it to take action if work has been copied?
It is the responsibility of the individual whose work was copied to take action under the Copyright, Designs and Patents Act.
Name three primary breaches of the Copyright, Designs and Patents Act.
Primary breaches are copying an original work, issuing a copy to the public, renting or lending a copy to the public, performing, showing or playing the work in public, and making an adaptation of it.
Name two secondary breaches of the Copyright, Designs and Patents Act.
Secondary breaches are importing a copy, possessing or dealing with a copy, providing the means to make copies, permitting the use of premises for making copies, and providing equipment for a performance of a copy.
Define software piracy.
Software piracy is the illegal copying and distribution of software.
Name three methods companies use to prevent software piracy.
Companies use a product key or licence, an agreement of terms and conditions before installation, and holograms on the packaging. Some older software would only run with the CD-ROM or memory stick physically in the device.
How does a hologram show that software is genuine?
Holograms are too difficult and costly for pirates to implement, so packaging without one is usually an illegal copy.
A product key is a unique string of letters and numbers supplied with the software to it.
A product key is a unique string of letters and numbers supplied with the software to activate it.
What does a licence agreement tell the user?
A licence agreement informs the user exactly how they are legally allowed to use the product, and they must agree to the terms before installation can finish.
True or False?
Downloading videos from a streaming service and sharing them breaches the Copyright, Designs and Patents Act.
True.
The Act covers videos and audio, and sharing them prevents the copyright owner from receiving an income.

Sign up to unlock flashcards

By signing up you agree to our Terms and Privacy Policy

Previous:SafetyNext:Communication