Security (Cambridge (CIE) IGCSE ICT): Flashcards

Hacking is gaining unauthorised access to computer systems or networks to gain control, steal information or cause damage.

A hacker looks for unpatched software, out-of-date anti-malware and weak passwords.

False.

Hacking can also cause data breaches, the installation of malware, data loss and identity theft.

Phishing is a form of social engineering in which fraudulent, legitimate-looking emails are sent to a large number of addresses, claiming to be from a reputable company, to gain access to a user's details.

Phishing can be prevented by anti-spam filters, training staff to recognise fraudulent emails, and user access levels that stop staff opening file types such as .exe and .bat files.

Pharming is when a user types a website address into a browser and is redirected to a fake website designed to trick them into entering sensitive information.

False.

The user types the address themselves; the attacker alters DNS settings or the user's browser settings to redirect them to the fraudulent website.

Smishing uses SMS messages and vishing uses fraudulent phone calls, but both are forms of phishing used to obtain personal information.

Do not click links in unsolicited text messages, never share personal information over the phone unless you initiated the call, verify the caller's identity independently, and check the sender's number carefully for anything suspicious.

Malware is any software created with malicious intent to cause harm to a computer system.