Flashcards
CS Unit 5 C2
Cards in this deck (12)
- 1What is the importance of network security?1) Confidentiality: protection of data held in a network.
2) Correctness: data is useless unless it is correct and therefore shouldn't be altered without authorisation.
3) Availability: a network is useless if the data cannot be accessed, and so it must be protected from external threats that could limit a network's accessibility. - 2What are some methods of authorisation?1) Access control: giving certain users authorisation to access or modify certain files in a network (e.g. read-only access or read and write - modification - access).
2) Firewall: controlling the data passing from one network to another using a set of rules (firewall policy).
3) Physical security: controlling access to critical parts of a network using physical methods (such as locked doors) rather than software. - 3Name the security advantages of cloud storage.- the storage location is off-site so data is protected from loss due to theft, fire and electrical failures,
- cloud storage systems manage the back-up of your data so there are copies in case of hardware failure or data deletion.
- cloud storage provider is responsible for the hardware your data is stored on.
- more storage space can be provided when needed by the cloud storage provider. - 4Name the security risks of cloud storage.- the data could be accessed by unauthorised users and strangers as it is accessible via the internet.
- access to cloud storage is dependent on having a reliable, high speed internet connection.
- if the cloud storage provider is faced with an unfortunate situation (theft, bankruptcy etc.) data will be unaccessible (temporarily or permanently).
- users of cloud storage have to assume that the service providers are trustworthy.
- different countries have different laws on the protection of data; data stored in another country will be under different levels of protection. - 5How can the security risks of cloud storage be reduced?1) Cloud storage providers store data at multiple locations so that any physical threats don't have an impact on data accessibility.
2) You can encrypt your data so that it is more difficult read while it is being transferred to/from the cloud storage provider or stored on the provider's server. - 6What are the security risks of contemporary storage?USB - potentially sensitive data is stored on a small device that is easily lost.
- easily accessible (anyone who has physical access to it can access the data unless it is encrypted)
NAS - prone to hacking once connected to the internet.
- files are accessible if the device's default password is used.
- software running on NAS must be updated to fix security weaknesses; not updating them makes them prone to unauthorised access. - 7What method of contemporary storage can be used if data needs to be accessed over the internet?NAS (network-attached storage).
- 8Define a cyber attack and list its two types.Cyber attack: a kind of malicious attack on a network-connected device.
Its types:
1) Social engineering (a kind of attack that takes advantage of the way people behave in certain situations).
2) Technical weaknesses - 9What are the types of social engineering?1) Phishing: attempting to get confidential information by sending a user a message pretending to be a trustworthy person or organisation.
2) Shoulder surfing: gaining access to information by watching someone else enter it into a computer system.
3) Pharming: directing Internet users to a fake website that looks like a real one in order to obtain personal information. - 10What are the types of technical weaknesses?1) Unpatched software: software that hasn't had the latest security update applied to it, making it vulnerable to attack.
2) USB devices: they may contain malware that could be transferred to your system or copy data to the attacker.
3) Eavesdropping: intercepting data being sent from/to a network. As the data is being read only, the user may not know of the criminal's obtaining it until they use it. - 11What are the methods of identifying vulnerabilities?1) Penetration testing: deliberately attacking a system to find weaknesses. After the attack, a report is presented explaining the issues found and their impact.
2) Commercial analysis tools: scanners that look for common issues and alerts users to them. They can only identify known vulnerabilities and must be updated to be effective.
3) Reviews of network and user policies: policies (authorisation, access controls, network patching, etc.) relating to the network should be regularly reviewed to ensure that they are up to date and suitable to maintain the network. - 12What are some methods of protecting software systems from cyber attacks?1) Consideration of security at the design stage.
2) Code reviews (automated or by another programmer) to remove code vulnerabilities and bad programming practices.
3) Modular testing: testing each block of code as it is completed to ensure the code works as expected.
4) Audit trails: a record of activities that have taken place on a computer system. It is generated automatically and records what has happened as well as who or what made the change
5) Using secure operating systems.
6) Providing effective network securities.
Information
- Description
- 11 Computer Science Flashcards on CS Unit 5 C2, created by m r on 30/12/2022.
- Created by
- m r
- Views
- 0
- Rating