OCR GCSE Computer Science J277 - 1.4 Network Security Flashcards

A set of 29 vocabulary flashcards based on OCR GCSE Computer Science J277 - 1.4 Network Security lecture notes.

Network security

Protecting networks, systems and data from unauthorised access, damage or disruption.

Malware

Malicious software designed to damage, disrupt, spy on or gain unauthorised access to systems.

Virus

Malware that attaches itself to files or programs and spreads when they are run or shared.

Trojan

Malware disguised as legitimate software to trick a user into installing or running it.

Spyware

Malware that secretly collects information about a user or system.

Social engineering

Manipulating people into revealing information or performing actions that compromise security.

Phishing

A social-engineering attack using fraudulent messages or websites to trick users into revealing information or installing malware.

Brute-force attack

Trying many possible passwords or credentials until the correct one is found.

Denial-of-service (DoS) attack

Flooding a system or network with requests or traffic so legitimate users cannot access the service.

Data interception and theft

Capturing data while it is being transmitted or obtaining data without authorisation.

SQL injection

Entering malicious SQL through an input field so an insecure database query behaves in an unintended way.

Cause of SQL injection vulnerability

Poorly designed software treating malicious user input as part of an SQL command.

Network vulnerability

A weakness that could be exploited to compromise a network, system or data.

Penetration testing

Authorised testing that attempts to find and exploit security weaknesses before attackers do.

Anti-malware software

Software that detects, blocks, quarantines or removes malicious software.

Firewall

Hardware or software that monitors and controls network traffic according to security rules.

User access level

Permissions that restrict what a user can view, change or run.

Purpose of user access levels

Giving users receive only the permissions they need, reducing the damage possible from mistakes or compromised accounts.

Password

A secret credential used to help authenticate a user.

Password security improvement methods

Using strong passwords, avoiding reuse, limiting login attempts and using suitable authentication controls.

Encryption

Converting readable data into an encoded form so it cannot be understood without the correct key.

Data protection via encryption

Ensuring that intercepted or stolen encrypted data is difficult to understand without the decryption key.

Physical security

Measures that prevent unauthorised physical access to computer equipment or network infrastructure.

Examples of physical security

Locked rooms, secure cabinets, access cards, biometric entry or other controlled access.

Layered security strategy

Using several security measures together because different measures protect against different threats, reducing overall risk.

Authentication

Checking that a user is who they claim to be before granting access.

Difference between authentication and access level

Authentication verifies identity; access level controls what an authenticated user is allowed to do.

Difference between a threat and a vulnerability

A threat is something that could cause harm; a vulnerability is a weakness that the threat could exploit.

Strategy for security scenario exam questions

Identify the relevant threat or weakness, choose a suitable prevention measure and explain how that measure reduces the specific risk.