Cyber security flashcards

Topic 6: Cyber security

What is cyber security?

The processes, practices and technologies that protect networks, computers, programs and data from attack, damage or unauthorised access.

What is social engineering? Give two examples.

Manipulating people into giving away information or access. Examples: phishing (fake emails or sites), blagging (an invented story to persuade someone), shouldering (watching someone type a PIN or password).

What is malware? Name three types.

Software written to cause harm or gain unauthorised access. Types: viruses, worms, trojans, spyware and ransomware.

What is a brute force attack and how can it be prevented?

Trying every possible password until one works. Prevented by long, complex passwords and by locking an account after several failed attempts.

What is SQL injection?

Typing SQL code into a website’s input box so that it runs on the database, to read or change data. Prevented by validating input and using parameterised queries.

How does a firewall protect a network?

It checks incoming and outgoing traffic against a set of rules and blocks traffic that is not allowed.

What is encryption?

Scrambling data using a key so that it cannot be understood if it is intercepted; only someone with the right key can decrypt it.

What is penetration testing?

Authorised, simulated attacks on a system to find its weaknesses before real attackers do.

Why is two-factor authentication more secure than a password alone?

The user needs two different kinds of evidence, such as a password and a code sent to their phone, so a stolen password alone is not enough.