# 5.3 Cyber Security

***

## Cyber Threats

### Bruteforce Attack

Tries every single combination until the correct one is found.

### Data Interception

Involves eavesdropping to steal sensitive information and use it for attacks

### DDos Attack

A Distributed Denial of Service attack is when multiple computers are used as bots. They flood a server with lots of request at the same time that the server cannot handle and crashes

### Malware

Malicious software used to gain access to a system such as a virus[^1], worm[^2], [trojan horse](#user-content-fn-3)[^3], spyware[^4], adware[^5], and ransomware[^6].

### Phishing & Pharming

Phishing involves sending a user an email which looks legit but takes them to a fake website to steal sensitive information. Pharming involves malware being downloaded without the users consent and also takes them to a fake website.

### Social Engineering

Manipulating individuals to gain access to confidential information by gaining trust or exploiting a weakness.

### Natural Causes

This can be anything from a flood, fire, or human error.

{% hint style="success" %}
Sample answer (How can stored data be maliciously damaged?):

Hacking\
Viruses\
Malware (you are allowed to mention the different types of malware)
{% endhint %}

***

## Cyber Defences

### Access Levels

These are used to restrict data access only to authorised individuals.&#x20;

### Anti-Virus

Helps to detect and remove malware or malicious software from the environment by scanning all files and downloads. If malware is found it is quarantined to prevent access and then deleted.

### Authentication

Methods such as biometric, fingerprints, and 2FA prevent unauthorised access.

### Firewalls

A firewall can be software or hardware based. It monitors incoming and outgoing traffic and keeps a log. The user can set criteria for the traffic and all traffic is compared to the criteria. If it matches, then the traffic is accepted. If not, then it's rejected and the user is notified.

{% hint style="success" %}
Sample answer:

Monitors incoming and outgoing traffic\
Checks that the traffic meets the rules set by the user\
It will block any traffic that doesn't meet these rules\
The user can create a whitelist or blacklist of IP addresses to block traffic from\
Can close certain ports
{% endhint %}

### Proxy Servers

These are used to hide a user's IP address and location to prevent tracking. They act as a firewall and can also be used to filter web traffic.

### SSL

Secure Socket Layer. Protocol used to encrypt data over the internet. For more details, go [here](../5.1-the-internet-and-the-world-wide-web#ssl-and-tls).

### Backups

Making copies of files in case something happens to the original files.

### Physical Methods

This can include, CCTV, locked rooms, and security keys.

{% hint style="success" %}
Sample answer (How to keep data secure?):

Use biometrics and 2FA\
Encrypt the data\
Create backups
{% endhint %}

***

## Exam Questions

{% embed url="https://cdn.savemyexams.com/pdfs/FUXtXxGM7i1Ol9OI.pdf" %}
COPYRIGHT -> SAVEMYEXAMS
{% endembed %}

***

[^1]: Code that attaches itself to a legit program

[^2]: Similar to a virus but it is a separate program that can spread and replicate itself

[^3]: Program that disguises itself as a legit program

[^4]: Records all keystrokes

[^5]: Displays unwanted ads and can contain viruses or spyware when clicked

[^6]: Encrypts a users files and demands money to decrypt them
