unit 5: communication 22

unit 5: communication 22

1. protocols

   • the set of rules governing how communication takes place
     • both computers must use the same protocol for communication to be successful
   • ethernet
     • the protocol used for wired communication
   • wi-fi
     • bluetooth
       • short range, low power connection
     • 801.11
       • longer range, faster, used for wireless networks
   • TCP
     • (transmission protocol) - used for assembling packets (datagrams)
   • IP
     • (internet protocol) used for addressing and routing of packets over the network
   • HTTP
     • allows webpages to be shared across different computers and browsers
   • HTTPS
     • works together with SSL (Secure Sockets Layer) to transfer data securely
   • SMTP
     • (simple mail transfer protocol) used to transfer email between severs and sending email from email applications
   • FTP
     • (file transfer protocol) used for sending files across the internet

2. cybersecurity

   • threats
     • malware
       • short for malicious software - broad-spectrum term used to describe software used to disrupt computer operation
     • phishing
       • fraud where an internet user is tricked (an email message is common) into revealing personal or confidential information e.g. bank details
     • social engineering
       • psychological manipulation of people into revealing personal or confidential information e.g. bank details
     • brute force attacks
       • repeatedly trying combinations of characters in usernames and passwords in order to gain access to a computer system
     • denial of service attacks
       • prevention of access to systems usually by repeatedly sending huge amounts of messages
         • asking a network or server to authenticate a request that has no valid return address
     • SQL injection
       • exploits poor security by adding SQL statements into data entry fields that destroy or copy data
     • data interception and theft
       • unauthorised taking or interception of computer-based information
   • defences
     • penetration testing
       • attempting to penetrate a system's security layers in order to demonstrate security risks
     • network forensics
       • monitoring and analysis of network traffic to detect intrusion
     • anti-malware software
       • anti-virus, spyware, ransomeware and malicious website detection software
     • firewalls
       • network security system that monitors incoming and outgoing traffic based on pre-determined rules
     • passwords
       • a hidden keyword that may have to follow certain rules which validates a user
   • double authentication
     • prevents access unless two or more pieces of evidence are successfully given to the system
       • e.g. at an ATM the card and the PIN
   • encryption
     • encoding data either symmetrically or asymmetrically in order to prevent access to the information