Cyber threats are attempts to cause harm to computer systems, networks, or data. The Cambridge 0478 specification requires knowledge of the following specific threats:
Malware (malicious software) is any software designed to harm or exploit systems. Types include:
| Type | How it works |
|---|---|
| Virus | Attaches itself to a legitimate file; replicates when the file is run; spreads to other files |
| Worm | Self-replicates and spreads across networks without user action; can slow down systems |
| Trojan | Appears to be legitimate software but contains hidden malicious code; does not replicate |
| Spyware | Secretly monitors user activity and collects data (keystrokes, passwords) without consent |
| Adware | Displays unwanted advertisements; may redirect browser |
| Ransomware | Encrypts victim's files; demands payment (ransom) for the decryption key |
Phishing is a social engineering attack where fraudulent emails or messages are sent that appear to be from a trusted source (a bank, government, or well-known company). The goal is to trick users into revealing sensitive information such as passwords or credit card details, or clicking malicious links.
Pharming redirects users to a fake website even when they type the correct URL. The attacker corrupts the DNS cache (DNS poisoning) so that the domain name resolves to a different IP address controlled by the attacker. The user believes they are on the real site, but their credentials are captured.
A brute force attack is a method of cracking a password or encryption key by systematically trying every possible combination until the correct one is found. This can be automated with software. Longer, complex passwords make brute force attacks impractical.
A Denial of Service (DoS) attack floods a server or network with excessive traffic, making it unavailable to legitimate users.
A Distributed Denial of Service (DDoS) attack does the same but uses many computers (often compromised, forming a botnet) simultaneously, making it much harder to block.
The attacker secretly intercepts and potentially alters communication between two parties who believe they are communicating securely. For example, intercepting data on an unsecured Wi-Fi network.
An attacker enters malicious SQL code into a web form or URL input field. If the website does not properly validate input, the SQL code is executed by the database, potentially allowing the attacker to: view, edit, or delete database records; bypass login authentication.
Social engineering is the use of psychological manipulation to trick people into revealing confidential information or taking actions that compromise security. It exploits human trust rather than technical vulnerabilities. Examples include phishing, pretexting, baiting, and tailgating (following someone through a secure door).
6 questions · 14 marks
| Term | Definition |
|---|
10 minutes · mixed marks