Cyber Security
遊んで学ぼう
問題に答えてエネルギーを集めたら、釣りや探検を楽しもう。アカウント不要。
レッスンノート
Cyber Security Threats
- Brute-force attack: repeatedly tries password/PIN combinations; dictionary attack tries common words/phrases.
- Data interception & theft: uses a packet sniffer to capture network data and steal usernames/passwords.
- DDoS attack: floods a server with requests from many bots (compromised computers), making it unusable.
- Hacking: exploits weaknesses (unpatched software, outdated anti-malware) to gain unauthorised access.
- Malware: malicious software including virus (replicates, corrupts files), worm (spreads across network), Trojan (disguised as legitimate), spyware (records activity), adware (displays ads), ransomware (encrypts files, demands ransom).
- Pharming: redirects user to a fake website by altering DNS settings or browser settings; protect with anti-malware, check URLs, look for padlock icon.
- Phishing: sends fraudulent emails/SMS claiming to be from a reputable company to trick users into revealing details.
- Social engineering: exploits human weaknesses (e.g., fraudulent phone calls, pretexting) to gain confidential data.
Keeping Data Safe – Access Control & Authentication
- Access levels: set based on role – full access (create/edit/delete), read-only, no access.
- Authentication: verifies user identity via usernames/passwords, multi-factor authentication, CAPTCHA, or biometrics (fingerprint, facial recognition, iris scan).
- Biometrics are more secure than passwords: cannot be guessed, faked, recorded by spyware, or shoulder-surfed.
Keeping Data Safe – Software & Network Defences
- Anti-malware: scans files/emails/websites for known malware signatures; includes anti-virus, anti-spam, anti-spyware; updates automatically.
- Firewall: monitors incoming/outgoing traffic, filters based on rules; can be hardware (protects whole network) or software (protects individual devices).
- Proxy server: hides user's IP address/location, filters web traffic, blocks malicious content.
- SSL (Secure Socket Layer): encrypts data transmitted over the internet; uses digital certificate with public key for authentication.
- Automatic software updates: ensure vulnerabilities are patched quickly without user intervention.
Keeping Data Safe – User Practices & Communication
- Privacy settings: control personal information shared online; review regularly to prevent identity theft.
- Check URLs: verify links before clicking (e.g., `amaz.on.co.uk` vs `amazon.co.uk`) to avoid phishing.
- Monitor communication: phishing emails often have spelling/grammar errors, urgent tone, or lack professionalism.
- User vigilance: lock devices, log off when not in use, do not share passwords, encrypt data, keep software up to date.
DDoS attack: attacker controls botnet to flood server with requests, denying service to legitimate users.
スライド
練習問題
無料プレビュー — 52問中8問。すべて見るには登録を。
1.What is the term for a type of malware that locks a user's computer and demands payment to unlock it?
Easy- ARansomware
- BSpyware
- CAdware
- DTrojan
2.Which of the following is a method used to prevent unauthorised access by monitoring and filtering network traffic based on a set of rules?
Easy- AFirewall
- BProxy server
- CAnti-malware
- DSSL
3.A company's website becomes slow and eventually crashes because a large number of requests are sent to it from multiple compromised computers. What type of attack is this?
Medium- ADDoS attack
- BBrute-force attack
- CPhishing attack
- DData interception
4.Which security measure uses unique physical characteristics such as fingerprints or iris scans for authentication?
Easy- ABiometrics
- BCAPTCHA
- CMulti-factor authentication
- DEncryption
5.A user receives an email that appears to be from their bank, asking them to click a link and enter their login details. The email contains several spelling mistakes. What type of threat is this?
Medium- APhishing
- BPharming
- CSocial engineering
- DSpyware
6.An attacker repeatedly tries different combinations of a user's password to gain unauthorised access. Which type of attack is this?
Easy- ABrute-force attack
- BDictionary attack
- CDDoS attack
- DData interception
7.Which of the following is a type of malware that can replicate itself and spread to other computers on a network without needing to attach to a host file?
Easy- AWorm
- BVirus
- CTrojan
- DSpyware
8.What is the purpose of a proxy server in network security?
Medium- ATo hide a user's IP address and location
- BTo encrypt data transmitted over the internet
- CTo scan for malware in email attachments
- DTo manage user access levels