An independent mission to master the threats and defenses of computer systems for your J277 GCSE Exam.
An umbrella term for "Malicious Software". Designed to damage, disrupt, or gain unauthorized access to a computer system.
Manipulating people into giving away sensitive info. Phishing is the key exam term (fake emails to harvest data).
People are the 'weak point'!
Trial and error! Using automated software to try every possible password combination until it cracks the account.
Flooding a server with useless traffic until it crashes or becomes unavailable to legitimate users.
Passive monitoring of network traffic to capture packets. Often uses "packet sniffers" on unencrypted networks.
Entering malicious code into input fields (like login boxes) to manipulate the backend database.
Authorized ethical hacking to find and report vulnerabilities before they are exploited.
Monitors traffic at the network boundary. Blocks unauthorized data based on predefined rules.
Restricts file access based on job role. Limits damage if one account is compromised.
Scans for known malware 'signatures'. Quarantines or deletes suspicious files.
Requires a second code (e.g., to a phone). Stops access even if the password is stolen.
Locks, CCTV, Security Guards. Prevents people from physically stealing server hardware.
Encryption does not stop data from being stolen. It only makes it meaningless / unreadable without the key. Use these exact words for full marks!
Avoid saying "it makes it harder to hack". Be specific. "Limiting login attempts stops automated brute-force attacks."
For SQL Injection, you MUST mention that code is entered into an input form / text box on the website.
Firewalls work at the network boundary. They do not scan files inside your computer (that's Anti-malware).
Ready for the exam?