Chapter 6 – Security, privacy and data integrity

CIE 9618 Computer Science

Syllabus Point 1: Explain the difference between the terms security, privacy
and integrity of data
Textbook Reference: Section 6 (Introduction)

Summary
• Security means protecting data from attacks or threats.
• Privacy means keeping personal data secret.
• Integrity means keeping data correct and unchanged.

Analogy
Imagine using cloud storage:
• Security is like encryption and passwords that stop hackers.
• Privacy is setting permissions so only you or trusted users can open files.
• Integrity is when files don’t get corrupted or altered after being saved.

1
 Chapter 6 – Security, privacy and data integrity

Syllabus Point 2: Show appreciation of the need for both the security of data
and the security of the computer system
Textbook Reference: Section 6.1 (Intro & 6.1.2)

Summary
• Data security protects files and personal info from being seen, changed, or stolen.
• System security protects the whole computer (hardware + software) from threats like
hacking, malware, and unauthorized access.
Both are needed: if the system is attacked, then data can be stolen or damaged.

Analogy
Think of a secure server room:
• Data security is like putting your files in a locked drawer.
• System security is like locking the door to the server room, using alarms, cameras,
and ID checks.
Without the door lock (system), the drawer (data) isn’t safe—even if it has its own lock.

2
 Chapter 6 – Security, privacy and data integrity

Syllabus Point 3: Describe security measures designed to protect computer

Summary
Computer systems need layers of security to block threats. These include:
• User accounts & passwords – Control who can log in and what they can see.
• Authentication methods – Like digital signatures and biometrics (e.g. fingerprint, face
scan).
• Firewall – Blocks unwanted network traffic.
• Antivirus & anti-spyware – Find and remove harmful software.
• Encryption – Scrambles data so it can’t be read if stolen.
Stand-alone PCs need basic protections like strong passwords and antivirus.
Networks need extra layers like firewalls, access control, and encryption to stay secure.

Analogy
Imagine a high-security office building:
• Each worker has a keycard and PIN → user accounts + passwords.
• Some doors need fingerprints → biometrics.
• Security guards at entrances → firewall.
• Camera system watching for intruders → anti-virus/spyware.
• All files are in locked boxes with codes → encryption.
Whether it’s one office (stand-alone PC) or a whole office block (network), different layers
protect it

3
 Chapter 6 – Security, privacy and data integrity

Syllabus Point 4: Show understanding of the threats to computer and data

Summary
Computers connected to networks or the internet face many threats:
• Malware:
o Viruses damage or delete files.
o Spyware steals what you type or do.
• Hackers: Try to break into systems and steal or mess with data.
• Phishing: Fake emails trick users into giving private info.
• Pharming: Sends users to fake websites to steal data — even if the link looks real.
These threats can lead to stolen identities, lost data, or broken systems.

Analogy
Imagine your network is a public airport:
• Viruses are like travelers carrying hidden bombs (they cause harm once inside).
• Spyware is like secret cameras watching you enter passwords.
• Hackers are people sneaking past airport security.
• Phishing is someone handing you a fake boarding pass to steal your identity.
• Pharming is changing airport signs to send you to a fake flight gate.
Without good security checks, danger can sneak in.

4
 Chapter 6 – Security, privacy and data integrity

Syllabus Point 5: Describe methods that can be used to restrict the risks
posed by threats
Textbook Reference: Section 6.1.3 & 6.1.2

Summary
To reduce risks from things like malware, hackers, phishing, and pharming, we use:
• Antivirus & Anti-spyware: Detect and remove harmful software.
• Firewalls: Block unsafe traffic.
• Encryption: Makes stolen data unreadable.
• Strong Passwords: Hard to guess or crack.
• User Access Control: Only the right people can see or change certain data.
• Security Updates: Fix weak spots in software.
• Awareness Training: Helps users spot phishing or scams.

Analogy
Think of your computer system like a bank:
• Antivirus is the alarm system catching break-ins.
• Firewall is the security guard at the door.
• Encryption is like storing valuables in a locked vault.
• Access control is giving employees different keys — not everyone opens the vault.
• Training is like teaching staff how scams work so they don’t fall for them.
Each layer adds extra safety.

5
 Chapter 6 – Security, privacy and data integrity

Syllabus Point 6: Describe security methods designed to protect the security

Summary
To protect data, two key methods are used:
• Encryption: Turns data into unreadable code unless someone has the decryption key.
Even if hackers steal it, they can’t understand it.
• Access Rights: Sets who can view or change data.
Only trusted users (like admins) can see or edit sensitive info.
For example, a student can’t access teacher records.

Analogy
Think of a company’s cloud storage:
• Encryption is like putting files in a locked safe—only people with the right key can
open them.
• Access rights are like giving different keycards to staff:
– The manager can open all doors.
– An intern only opens the kitchen door.
These tools make sure data stays private and safe.

6
 Chapter 6 – Security, privacy and data integrity

Syllabus Point 7: Describe how data validation and data verification help
protect the integrity of data
Textbook Reference: Sections 6.2.1 and 6.2.2

Summary
Data integrity means the data is correct and reliable. Two key tools help:
• Validation: Checks if input is reasonable and follows rules (like age must be a number
between 0 and 120).
It stops bad data from being saved, but it can’t catch all errors.
• Verification: Checks if the data is entered or sent correctly.
– Double entry: Type it twice and compare.
– Visual check: Read it over.
– Check digits: Extra number to spot typing mistakes.
Together, they stop errors before data is stored or used.

Analogy
Imagine entering data into a medical database:
• Validation is like the form saying “you can’t type letters in the age box.”
• Verification is like having a nurse check the screen against the paper form.
If either fails, the patient’s record could be wrong — which could be dangerous.

7
 Chapter 6 – Security, privacy and data integrity

Syllabus Point 8: Describe and use methods of data validation

Summary
Data validation checks if input is reasonable and allowed before saving. It doesn’t check if it’s
actually correct, just if it follows rules.
Types of validation:
• Range check – Value must fall between two numbers (e.g. age 0–120).
• Format check – Data must follow a pattern (e.g. email must have “@”).
• Length check – Input must be a certain number of characters.
• Presence check – Field must not be empty.
• Existence check – Value must exist in the system (e.g. product code).
• Limit check – Similar to range, but only checks one end (e.g. no more than 100).
• Check digit – Extra number added to detect input mistakes in long numbers.

Analogy
Think of an online registration form:
• Range check: Age must be between 13 and 100.
• Format check: Phone number must have only digits.
• Presence check: Email field cannot be blank.
• Check digit: ID numbers must end with a correct digit to prove they’re valid.
These act like rules in the form’s code that keep bad data out.

8
 Chapter 6 – Security, privacy and data integrity

Syllabus Point 9: Describe and use methods of data verification during data
entry and data transfer
Textbook Reference: Section 6.2.2

Summary
Verification checks that data was entered or transferred correctly, not just that it looks
reasonable.
During Data Entry:
• Visual check – User reads and compares screen data with original.
• Double entry – Type the same data twice; the system compares them.
During Data Transfer:
• Parity check (byte or block) – Adds a bit to ensure the number of 1s is correct (even or
odd).
• Checksum – A total value is calculated before sending and checked after receiving.
If it doesn’t match, data is corrupted or changed.

Analogy
Think of sending a package through the mail:
• Double entry is like writing the address twice and checking both match.
• Visual check is rereading the address carefully.
• Parity check is like weighing the package—if it’s off, something’s wrong.
• Checksum is sealing the box and writing the total weight. If the box arrives lighter or
heavier, you know it was tampered with.