ICT unit 2

What is a Trojan?

A Trojan disguises itself as legitimate software

Which type of malware is specifically designed to replicate itself and spread to other computers?

Worm

What is encryption?

Encryption transforms data into a secure format

What is the main difference between a virus and a worm?

A virus require user action to spread but a worm can spread automatically by self replicating

What is phishing?

Phishing is a social engineering attack where criminals send deceptive emails to trick users into revealing sensitive information

What is blagging?

Blagging uses a fabricated scenario to extract information

Shoulder surfing?

Shoulder surfing involves observing someone entering sensitive information, like passwords, to steal it.

What is malware?

Malware is malicious software designed to damage or gain unauthorised access to a system, including viruses, worms, trojans, and ransomware

What is Brute force attack?

A brute force attack involves systematically trying every possible combination of passwords until the correct one is found.

What is Denial of service?

A Denial of Service (DoS) attack floods a server or network with traffic to make it unavailable to legitimate users.

What is a man in the middle attack?

A Man-in-the-Middle (MitM) attack occurs when a hacker secretly intercepts and communication between two parties.

What is a Ransomware?

Ransomware encrypts a victim's files and demands a ransom payment in exchange for the decryption key

What is a spyware?

Spyware secretly monitors user activity and collects sensitive data such as login credentials without the user's knowledge.

Impact of Cybersecurity Attacks?

• Data breaches can expose personal, financial, or confidential business information, leading to identity theft and financial loss.

• Organisations may suffer significant reputational damage if customers lose trust following a security incident.

• Cyberattacks can cause operational disruption, preventing businesses or public services from functioning normally.

• Individuals and organisations may face legal consequences under laws such as the UK GDPR if personal data is not adequately protected.

• The financial cost of recovering from an attack — including system repairs, legal fees, and compensation — can be enormous.

Protecting Against Cyber Threats?

• Using strong, unique passwords and multi-factor authentication (MFA) significantly reduces the risk of unauthorised account access.

• Keeping software and operating systems up to date ensures that known security vulnerabilities are patched promptly.

• Firewalls monitor and filter incoming and outgoing network traffic based on predefined security rules to block suspicious activity.

• Anti-malware software detects, quarantines, and removes malicious programs from a device.

• Educating users about recognising phishing attempts and practising safe browsing habits is a key layer of defence against social engineering attacks.

What is a Penetration testing?

A penetration test is an authorised simulated cyberattack used to identify vulnerabilities in a system

What is a firewall?

A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on rules

What is an sql injection?

SQL injection is an attack where malicious SQL code is inserted into an input field to manipulate a database

What is a virus?

A virus is a type of malware that attaches itself to legitimate files and replicates when the infected file is executed

What is a Distributed denial of service?

A Distributed Denial of Service (DDoS) attack floods a server or network with traffic to make it unavailable to legitimate users.

What is a digital certificate?

A digital certificate is used to verify the identity of a website and establish a secure encrypted connection