Threats to data Cambridge IGCSE Information & Communication Technology revision
Not started
Learn it
In plain words
Data is worth money, so people try to steal it. Some break in. Most just trick the owner into handing it over. Know each threat by what the criminal actually does.
6 things to know
- Hacking is gaining unauthorised access to a computer system. Data can be stolen, changed or deleted. It is guarded against with firewalls, strong passwords and two-factor authentication.
- Phishing: a fake email, appearing to come from a real organisation, with a link to a fake website where the user enters personal details.
- Smishing is phishing by SMS text message. Vishing is phishing by voice: a phone call from someone pretending to be from a bank or other company.
- Pharming: malicious code on the user's computer or on a server sends the user to a fake website even when the correct address is typed.
- A virus is a program that copies itself and can corrupt or delete data. Malware is any software designed to cause harm, including viruses, spyware and ransomware. Guard against it with up-to-date anti-malware software, and by not opening unexpected attachments or downloading from untrusted sites.
- Card fraud. Shoulder surfing: watching someone enter a PIN. Card cloning: copying the data from a card's magnetic stripe onto a fake card. Key logging: software or hardware that records the keys pressed, to capture card numbers and passwords.
Worked example
A man receives a text message saying his bank account has been locked, with a link to "unlock" it. What is this, and how should he respond?
- A fake message by SMS that tries to get personal details is smishing.
- He should not click the link or reply.
- He should contact the bank using the phone number or website he already knows to be genuine.
Tips and tricks
- Phishing: email. Smishing: SMS. Vishing: voice. Pharming: redirected with no click. The first letters help.
- Shoulder surfing needs no technology at all. Shield the keypad with your hand.
It lands in your notebook with its questions as flashcards.
Threats to data: 6 questions and answers
These are the quiz’s questions. Do the quiz first, then come back here for the ones that got you.
What is hacking?
Data may be stolen, changed or deleted.
A fake text message asks you to confirm your bank details. This is:
It arrives by SMS.
A caller pretends to be from your bank and asks for your PIN. This is:
It is done by voice.
What is shoulder surfing?
No technology is needed.
What does a key logger do?
Passwords and card numbers can be captured.
How does pharming differ from phishing?
Malicious code does the redirecting.
Quiz
6 questions
Tap an answer and you’ll see straight away whether it’s right, and why.
Worksheet
3 questions, 7 marks. Write your answers on paper, then check them.
Threats to data
Cambridge IGCSE Information & Communication Technology 0417 · 7 marks · papermunch.org
Name ______________________________ Date ______________
Describe the difference between phishing, smishing and vishing.[3]
Show answerHide answer
All three try to trick a person into giving personal details. Phishing uses email, smishing uses SMS text messages, and vishing uses voice phone calls.
Describe two ways of protecting yourself against card fraud at an ATM.[2]
Show answerHide answer
Shield the keypad when typing the PIN, to prevent shoulder surfing. Check the machine for anything attached to the card slot.
Describe what is meant by pharming.[2]
Show answerHide answer
Malicious code is installed on a user's computer or on a server. It redirects the user to a fake website without their knowledge.
Answers: Threats to data
- 1. All three try to trick a person into giving personal details. Phishing uses email, smishing uses SMS text messages, and vishing uses voice phone calls.
- 2. Shield the keypad when typing the PIN, to prevent shoulder surfing. Check the machine for anything attached to the card slot.
- 3. Malicious code is installed on a user's computer or on a server. It redirects the user to a fake website without their knowledge.