0% found this document useful (0 votes)
11 views9 pages

Computer Network Threats and Security Measures

The document outlines various threats to computer networks, including eavesdropping, identity theft, and malware, and categorizes their impact on availability, integrity, or confidentiality. It also discusses security measures such as firewalls, antivirus software, and employee training to protect against these threats. Additionally, it explains components of web addresses and the process by which web browsers retrieve web pages.

Uploaded by

tatebembridge
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
11 views9 pages

Computer Network Threats and Security Measures

The document outlines various threats to computer networks, including eavesdropping, identity theft, and malware, and categorizes their impact on availability, integrity, or confidentiality. It also discusses security measures such as firewalls, antivirus software, and employee training to protect against these threats. Additionally, it explains components of web addresses and the process by which web browsers retrieve web pages.

Uploaded by

tatebembridge
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Grade 9 Notes

Data Communication, Networking, and the Internet Continued

OBJECTIVES:

1. Describe accurately at least six threats to a computer network

2. Identify correctly whether a computer network threat has compromised the availability,
integrity, or confidentiality of a company’s resources and services

Computer threats refers to anything that has the potential to cause harm to a computer system. A
threat is something that may or may not happen but has the potential to cause serious damage.

1. Eavesdropping is an electronic attack where digital communications are intercepted by


an individual whom they are not intended for.

2. Industrial Espionage is an occasion when one company steals secrets from another
company with which it is competing.

3. Spam refers to the use of electronic messaging systems to send out unrequested or
unwanted messages (emails) in bulk.

4. Identity theft is the act of illegally obtaining someone’s personal information such as
full name, maiden name, address, date of birth, social security number, passwords, phone
number, e-mail, and credit card numbers. The thief can then use this information to gain
access to bank accounts, e-mail, cell phones, identify themselves as you, or sells your
information.

5. Credit card fraud is the act of someone illegally using another person’s credit card to
make purchases without their permission.

6. Botnet is alternatively referred to as a zombie network, a botnet (bot network) is a


group of infected computers that are under the control of one or more individuals. The
infected computers are used to perform tasks impossible for a single computer, such as
distributing millions of SPAM e-mail’s or a Distributed Denial of Service (DDoS) attack.
7. Denial of Service attack is a method of attacking a networked computer by sending it an
abnormally high number of requests, causing its network to slow down or fail. These
attack are normally run from multiple computers infected by worms or zombie computers
for a DDoS.

8. Phishing is a term used to describe a malicious individual or group of individuals who


scam users. They do so by sending e-mails or creating web pages that are designed to
collect an individual’s online bank, credit card, or other login information. Because these
e-mails and web pages look like legitimate companies, users trust them and enter their
personal information.

9. Pharming is a web page that has been created to deceive visitors into believing that is
another company’s web page. For example, a user may create a web page that appears to
be for a specific bank, requesting a username and password for login. However, if
information is entered into this page, it is captured by the person who created it.
Consequently, they may use this info on an actual bank site, gaining access to a person’s
bank account.

10. Malware is malicious software designed to change your settings, delete software, cause
errors, watch browsing habits, or open computer to attacks. It uses deceptive and
unethical tactics to install itself on your computer without your consent.

 Logic Bomb is a piece of code inserted into an operating system or software


application that implements a malicious function after a certain amount of time, or
specific conditions are met. They perform actions like corrupting or altering data,
reformatting a hard drive, and deleting important files.

 Virus is a program designed to cause damage, steal personal information, modify


data, send e-mail, display messages, or some combination of these actions. When
the virus is executed, it spreads by copying itself into or over data files,
programs.

 Worm is a destructive self-replicating program containing code capable of


gaining access to computers or networks. Once in the computer or network, the
worm causes harm by deleting, modifying, distributing, or otherwise manipulating
data.

 Trojan Horse is a program that appears to be something safe but is performing


tasks such as giving access to your computer or sending personal information to
other computers.

 Spyware is a term used to describe a program designed to gather information


about a user’s activity secretly. Spyware programs are often used to track users’
habits to target them with advertisements better.

 Key logger is alternatively referred to as a keystroke logger, a keylogger is a


software program or hardware device that is used to monitor and log each of the
keys a user types into a computer keyboard. The user who installed the program
or hardware device can then view all keys typed in by any computer user.

Activity

Indicate whether the Computer Network Threat affects the availability,


integrity OR confidentiality of a company’s resources and services. (Indicate with
a YES under the correct columns)

Computer Availability Integrity Confidentiality


network threat (Honesty)

Denial of service

Pharming

Identify Theft

Eavesdropping

Botnet

Key logger

Industrial
Espionage

Objective 3: Determine appropriately which security measure(s) is applicable for a given


situation.

Network security is protection of the access to files and directories in a computer network
against hacking, misuse, and unauthorized changes to the system.

Methods of Securing Computer Network

The are ways to protect the computers and data that the computers hold.

1. Firewall is a software utility or hardware device that acts as a filter for data entering or
leaving a network or computer. A firewall works by blocking or restricting network ports,
to prevent unauthorized access.

2. Antivirus is alternatively referred to as antivirus software, AVS, antivirus, or AV. An


antivirus program is a software utility designed to protect your computer or network
against computer viruses. If and when a virus is detected, the computer displays a
warning asking what action should be done, often giving the options to remove, ignore,
or move the file to the vault.

3. Anti-spyware is similar to antivirus programs, anti-spyware programs help to block and


prevent spyware and other malware infections on computers. Anti-spyware programs
monitor incoming data from e-mail, websites, and downloads of files and stop spyware
programs from getting a foothold in the computer operating system.

4. Network monitors is the phrase used to describe a system that continuously monitors a
network and notifies a network administrator though messaging systems (usually e-mail)
when a device fails, or an outage occurs. Network monitoring is usually performed
through the use of software applications and tools.

5. Training employees is the process of educating workers on how to safely use the
network so that malware are not downloaded or spread across the network or to avoid
other computer threats.
6. Following policies (standard operating procedures) are documents consisting of step by
step information on how to effectively execute a task. Once these steps are following
them the computer system or the network can be protected from threats.

7. Locks- Computer locks are able to keep laptops and desktop computers secured to the
desks so that persons cannot steal any component from the computer.

8. Security guard is a person whose job is to guard a place (such as a store or museum) and
make sure the people and things in it are not harmed.

9. Surveillance camera is a video camera that is used to observe a location. It is connected


to a recording device that can be used to check if unauthorized persons are gaining access
to a building or room.

10. Motion Detector or sensor is a device that detects physical movement on a device or
within an environment. It has the ability to detect and capture physical and or kinetic
movements in real time.

11. Keypad or security keypad is a device with a set of buttons or keys bearing digits,
symbols and/or alphabetical letters placed in order on a pad, that is used to enter codes to
gain access to a place or safe.

12. When referring to computers and security, biometrics is the identification of a person by
the measurement of their biological features. For example, a user identifying themselves
to a computer or building by their fingerprint or voice is considered a biometrics
identification.

13. Encryption is the process of encoding a message so that it can be read only by the sender
and the intended recipient.

14. Username and Password- A username is a name that uniquely identifies someone on a
computer system. This is usually paired with a password. This username/password is
referred to as a login. Passwords (string of characters used for authenticating a user on a
computer system) are kept a secret so that no unauthorized person can access your
computer system without entering the correct code with the correct username.
15. Turnkey solutions-This is a type of system that can be easily implemented into current
business processes. A turnkey solution is pre-made and ready to be used as soon as it is
installed. Installing turnkey solutions can allow a business to function more efficiently.
An advantages of having a good turnkey solution is protection against identity theft.
Turnkey identity solutions can be installed into a business’ computer network in order to
guard against identity theft and keep their networks more secure. Having a turnkey ID
solution helps the business to protect against malware and viruses. The information
provide for social media sites will also be more secure, and the business can be alerted if
there’s any suspicious activity on any of their accounts.

Activity 1

State the security measure(s) that you would use for each situation.

1. Hunter wants to ensure that no worm or virus comes onto his


computer._______________________

2. Phillips wants to send confidential information to his doctor however he does not want
anyone to get the information.___________________________________

3. Computer International Ltd realizes that its computers and accessories are going missing,
and it needs to find out who is responsible for doing so.__________________________

4. It was discovered that employees are downloading software on the work computers and
causing viruses to go on the network. The IT manager needs to find a way to stop this
from happening._______________________________________________

5. The owner of the company wants to restrict personnel from going into the top security
room and enable only allow himself and one other person to have access. He needs a
device that can allow him to enter a code or scan his
fingerprint.___________________________________

Activity 2

State whether a computer network security measures is either physical or logical ( Indicate
with a YES under the correct columns)
Computer Security Physical(Controlling Logical(Controlling
Measures access to buildings, access to computer
rooms, areas, and IT networks, system files
assets) and data)

Security guards

Anti-virus

Biometric systems

Locks

Firewall

Motion detector

Username and
Password

Objective 4: Describe the purpose of each component within a web address.

Web address is also known as URL (Uniform Resource Locator). It provides a way to locate a
resource on the web, the hypertext system that operates over the internet.

Below is an example of a web address and the different components.

 Communication Protocol:- is the message format computers used to exchange


information over the internet.

 WWW-World Wide Web is the subdomain, the name of the server listening to messages
using the http protocol.
 Domain Name- this is the organization/person that the web server belongs to, the section
of the domain name that has “.com” is called the domain extension. It is used to denote
what type of website it is. This makes it easier to evaluate what type of site it is. For
example a government website ends in the extension “.gov” while an education website
might end in “.edu”. The “.com” extension is used for commercial website and “.org” for
non-profit organization.

 Folder Path and HTML (Hypertext Markup Language) file- The path is the section of the
web address after the domain extension that indicates to your browser which folder or file
to open. Unlike the domain name, the path is case sensitive so “/[Link]” is not the
same as “/[Link].”

Objective 5: Explain how a web browser retrieves a desired web page.

A web browser, like Google Chrome will connect to a Domain Name Service (DNS) server-a
database which keeps track of computer names and IP(Internet Protocol) address. It will get the
IP for the web server, where the data is stored.

The browser then connects to the web server and sends an HTTP request for the desired web
page. The web server receives the request and checks for the desired page. if the page exists, the
web server sends it. if the server cannot find the requested page, it will send an HTTP 404 error
message. (404 means ‘Page Not Found’) the browser receives the page back and the connection
is closed.

Objective 6: Identify some characteristics of at least five distinct types of websites.

Thirteen types of Web sites are portal, news, informational, business/marketing, blog, wiki,
online social network, educational, entertainment, advocacy, Web application, content
aggregator, and personal. Many Web sites fall in more than one of these categories.

Below we will only look at five.

1. A news Web site contains newsworthy material including stories and articles relating to
current events, life, money, sports, and the weather. Newspapers and television and radio
stations are some of the media that maintain news Web sites.
2. Business/Marketing Web site contains content that promotes or sells products or
services. Nearly every enterprise has a business/marketing Web site. Allstate Insurance
Company, Dell Inc., General Motors Corporation, Kraft Foods Inc., and Walt Disney
Company all have business/marketing Web sites. Many of these enterprises also allow
you to purchase their products or services online.

3. Wiki is a collaborative Web site that allows users to create, add to, modify, or delete the
Web site content via their Web browser. Many wikis are open to modification by the
general public. Wikis usually collect recent edits on a Web page so that someone can
review them for accuracy. The difference between a wiki and a blog is that users cannot
modify original posts made by the blogger. A popular wiki is Wikipedia, a free Web
encyclopedia.

4. An online social network, also called a social networking Web site, is a Web site that
encourages members in its online community to share their interests, ideas, stories,
photos, music, and videos with other registered users. Most include chat rooms,
newsgroups, and other communications services. A media sharing Web site is a specific
type of online social network that enables members to share media such as photos, music,
and videos. Flickr, Fotki, and Webshots are popular photo sharing communities;
PixelFish and YouTube are popular video sharing communities.

5. An educational Web site offers exciting, challenging avenues for formal and informal
teaching and learning. On the Web, you can learn how airplanes fly or how to cook a
meal. For a more structured learning experience, companies provide online training to
employees; and colleges offer online classes and degrees. Instructors often use the Web
to enhance classroom teaching by publishing course materials, grades, and other pertinent
class information.

Common questions

Powered by AI

Effective security measures to prevent identity theft in a company's network include implementing firewall and antivirus software, using encryption for sensitive data transmission, enforcing strong password policies with username and password authentication, deploying biometric systems for secure access, conducting regular employee training on cybersecurity awareness, and installing security cameras and motion detectors for physical surveillance. A combination of these logical and physical security measures provides a comprehensive defense against identity theft threats .

Phishing attacks compromise confidentiality by deceiving individuals into providing sensitive information such as usernames and passwords through seemingly legitimate emails or websites. Prevention methods include using email filtering systems to detect phishing attempts, educating users on recognizing phishing schemes, implementing multi-factor authentication for additional security layers, and employing anti-phishing tools that warn users of fraudulent sites. These measures reduce the attack surface and increase the likelihood of identifying phishing attempts before data is compromised .

A firewall acts as a barrier between a trusted network and untrusted external networks by controlling data traffic based on predetermined security rules, thus preventing unauthorized access. It filters data packets entering or leaving a network, protecting against external threats. In contrast, antivirus software scans and detects malicious programs within a system, providing options to quarantine or remove them. While a firewall guards against network intrusions, antivirus focuses on combating malware within the network environment .

Usernames and passwords remain critical for network security as they provide a basic yet essential layer of authentication, ensuring only authorized users gain access to the system. However, they have limitations due to vulnerabilities such as weak password creation, susceptibility to phishing attacks, and the potential for credential theft. Strengthening password policies, combining them with multi-factor authentication, and educating users on secure password practices can help mitigate these weaknesses and enhance security .

When a web browser retrieves a desired web page, it first connects to a Domain Name Service (DNS) server to obtain the IP address of the web server hosting the page. The browser then sends a Hypertext Transfer Protocol (HTTP) request to this IP address. The server responds by sending back the requested page data if available, or an HTTP 404 error if the page is not found. DNS plays a crucial role by translating the human-readable web address into the machine-readable IP address, facilitating the browser's ability to locate and connect to the appropriate server .

Encryption plays a critical role in secure communications by encoding information so only authorized parties can read it, ensuring confidentiality and protection against unauthorized access during transmission. It is essential for transmitting confidential information because it converts the data into a secure format, making it unreadable to potential interceptors. This is vital for maintaining privacy and security in sensitive communications, such as sending confidential information over the internet .

Training employees contributes to network security by educating them on safe practices, such as recognizing phishing attempts, handling sensitive information, and avoiding risky behaviors like downloading unverified software. Well-informed employees serve as a human firewall, reducing the likelihood of human error leading to security breaches. Continuous education enhances their ability to identify and respond to threats effectively, thus fortifying the network against various cyber threats .

A Distributed Denial of Service (DDoS) attack significantly impacts a network's availability by overloading it with an overwhelming number of requests, causing slowdowns or complete failure to respond to legitimate users. It is typically executed using a botnet, which is a network of compromised computers controlled by an attacker to simultaneously send excessive traffic, rendering the targeted network or service unavailable .

Eavesdropping undermines a network's confidentiality by intercepting communications not intended for the interceptor, allowing unauthorized access to sensitive information. Types of information targeted may include login credentials, personal identification details, proprietary business data, and confidential communications. The consequences of eavesdropping can range from identity theft to corporate espionage, making it imperative to implement encryption and secure communication channels to protect sensitive data during transmission .

A Trojan Horse differs from a computer virus and a worm in its attack strategy by masquerading as legitimate software while performing harmful tasks like granting unauthorized access or stealing information. Unlike a virus, it does not attach itself to files and requires user interaction to execute. Unlike a worm, it does not self-replicate to spread across networks. Trojan Horses often rely on social engineering tactics to trick users into installation, whereas viruses and worms exploit vulnerabilities for propagation .

You might also like