어휘
| English | 의미 |
|---|---|
| worm/wɜːm/ | 벌레(worm) |
| ransomware/ˈrænsəmweə/ | 랜섬웨어 |
| security/sɪˈkjʊərɪti/ | 보안 |
| privacy/ˈprɪvəsi/ | 개인 정보 보호 |
| integrity/ɪnˈteɡrɪti/ | 무결성 |
| unauthorised/ʌnˈɔːθəraɪzd/ | 미승인 |
| virus/ˈvaɪrəs/ | 바이러스 |
| Trojan/ˈtrəʊdʒn/ | 트로이木马 |
| spyware/ˈspaɪweə/ | 스파이웨어 |
| adware/ˈædweə/ | 광고 소프트웨어 |
| phishing/ˈfɪʃɪŋ/ | 피싱 |
| pharming/ˈfɑːmɪŋ/ | 파밍 |
| social engineering/ˈsəʊʃl ˌendʒɪˈnɪərɪŋ/ | 사회 공학 |
| hackers/ˈhækəz/ | 해커 |
| denial of service/dɪˈnaɪəl ɒv ˈsɜːvɪs/ | 서비스 거부 |
| eavesdropping/ˈiːvzdrɒpɪŋ/ | 도청 |
| man-in-the-middle/mæn ɪnðə ˈmɪdl/ | 중간자 공격 |
English
The Friday the hospitals went dark
- On 12 May 2017 a program called WannaCry spread to more than 200,000 computers in 150 countries in a single day. It needed no one to click anything: it found a flaw in Windows file sharing and copied itself from machine to machine.
- On each one it encrypted every file and demanded $300 in bitcoin. In the UK, a third of hospital trusts were hit; 19,000 appointments were cancelled and ambulances were diverted.
- The patch that closed the flaw had been published two months earlier. The computers that were hit had not installed it.
- Worm, ransomware, missing update: three words from this lesson in one afternoon. This lesson is the threats to data and to the systems that hold it.
English
Security, privacy, integrity
- Security 安全 is keeping data safe from loss and from unauthorised 未授权 access, change or deletion.
- Privacy 隐私 is keeping data confidential, so that only those with the right to see it can, with consent and for a clear purpose.
- Integrity 完整性 is the data being accurate, consistent and complete.
- A file can be secure but corrupted, or accurate but readable by anyone. The exam asks for the difference in one sentence each.
연습
데이터 "무결성(integrity)"을 가장 잘 설명하는 것은?
난이도 1/5 · 100 코인 + 오늘 첫 완료 시 소액 보너스
무결성 = 정확하고 완전함. 보안 = 무단 접근 차단; 개인정보 보호 = 개인정보에 대한 통제.
연습
개인정보 보호는 개인이 자신의 개인정보를 누구에게 볼 수 있는지 통제하는 것이며, 보안은 무단 접근을 방지하는 것입니다.
난이도 1/5 · 100 코인 + 오늘 첫 완료 시 소액 보너스
서로 겹치지만 차이점이 있습니다: 보안은 침투자를 차단하고, 개인정보 보호는 개인정보에 대한 통제를 의미하며, 무결성은 정확성에 관한 것입니다.
English
Two things to protect
- The data: it is personal and confidential, so it must not be read, changed or deleted by an unauthorised person, and losing it would stop the organisation working.
- The computer system: an intruder who reaches it can install malware, use it to attack other systems, damage hardware or software, or lock it with ransomware.
- A secure system is the first line of defence for the data on it. "Why must a school keep both secure?" wants one reason for each.
탐색하기
위험 및 책임 실험실
관련된 규칙, 위험 또는 보호 조항에 따라 예제를 분류하십시오.
연습
왜 학교는 데이터뿐만 아니라 컴퓨터 시스템의 보안도 유지해야 합니까? 모든 해당되는 것을 선택하십시오.
난이도 2/5 · 140 코인 + 오늘 첫 완료 시 소액 보너스
시스템 보안은 첫 번째 방어선입니다: compromise된 기계는 공격하고, 도난당하며, 보赎금으로 잡힐 수 있습니다. 정확성은 무결성이며, 이는 다른 속성입니다.
English
Malware
| Type | What it does |
|---|---|
| virus 病毒 | self-copying code that attaches to other programs and spreads when they run |
| worm 蠕虫 | self-copying code that spreads over networks with no user action |
| Trojan 木马 | looks useful but hides malicious code |
| spyware 间谍软件 | secretly records key presses and actions and sends them to a third party |
| ransomware 勒索软件 | encrypts your files and demands payment |
| adware 广告软件 | pushes unwanted adverts |
Two families: the ones that spread themselves and the ones that hide
연습
웜(worm)과 바이러스(virus)의 차이는 무엇입니까?
난이도 1/5 · 100 코인 + 오늘 첫 완료 시 소액 보너스
웜은 사용자 조작 없이 네트워크를 통해 자체적으로 확산되며, 바이러스는 감염된 프로그램이 실행되어야 합니다.
연습
파일 암호화 후 해독 키 대가로 금전을 요구하는 악성 코드는 ______라고 부릅니다.
난이도 1/5 · 100 코인 + 오늘 첫 완료 시 소액 보너스
랜섬웨어는 피해자의 파일을 암호화하고 해독키를 대가로 보赎금을 요구합니다.
연습
각 유형의 악성 코드와 그 행동 매칭하기.
난이도 2/5 · 140 코인 + 오늘 첫 완료 시 소액 보너스
스파이웨어는 스파이링을 하고, 트로이는 위장하며, 웜은 네트워크를 통해 자체적으로 확산됩니다.
English
Worked example: describe a virus and spyware
Example
- Describe what is meant by a virus and by spyware. [4]
- A virus is malicious software that replicates, copying itself and attaching to other files, and deletes or corrupts data.
- Spyware is malicious software that records the user's key presses and actions and sends them to a third party, to obtain passwords and personal data.
- Two facts each: how it behaves, and what it does to the victim. Swapping "replicates" and "records" loses both marks.
English
Tricking people
- Phishing 网络钓鱼: an email pretending to come from a legitimate organisation leads the user to a fake website that collects their credentials or personal data.
- Pharming 域名欺骗: malicious code redirects the user to a fake website even when they type the correct address.
- Social engineering 社会工程: tricking a person into giving up information, by phone, by email or in person.
- The difference the exam marks: phishing needs the user to follow a link; pharming works on a correct address.
연습
피싱(Phishing)이란:
난이도 1/5 · 100 코인 + 오늘 첫 완료 시 소액 보너스
피싱은 가짜 메시지/사이트를 통해 사용자가 비밀번호나 정보를 알려주도록 속입니다.
연습
사용자가 은행의 정확한 웹 주소를 입력했음에도 불구하고 가짜 사이트에 도달합니다. 이것은:
난이도 1/5 · 100 코인 + 오늘 첫 완료 시 소액 보너스
포밍은 올바른 주소를 재지향하고, 피싱은 가짜 이메일의 링크를 클릭하도록 사용자를 필요로 합니다.
English
Attacks on the network
- Hacking by hackers 黑客: unauthorised access, often through a weak password or a software flaw.
- Denial of service 拒绝服务 (DoS/DDoS): a server is flooded with requests until real users cannot reach it.
- Eavesdropping 窃听: capturing data in transit, a risk on open Wi-Fi. Man-in-the-middle 中间人攻击: an attacker secretly relays or alters the messages between two parties.
Both parties believe they are talking to each other
연습
서비스 거부 공격(DoS/DDoS)은:
난이도 1/5 · 100 코인 + 오늘 첫 완료 시 소액 보너스
DoS/DDoS는 서버를 트래픽으로 압도하여 정당한 요청이 통과할 수 없게 합니다.
English
Worked example: two threats to a school network
Example
- Identify and describe two threats to the data on a school network, and give a different prevention method for each. [6]
- Malware: a virus copied onto a computer from an email attachment or a download replicates and corrupts or deletes files. Prevention: anti-virus software that scans files and is kept up to date.
- Hacking: an unauthorised person gains access to the network, for example by guessing a weak password, and reads or changes the data. Prevention: a firewall that blocks unauthorised traffic, and strong passwords.
- Threat, what it does, a prevention that actually stops it. Two threats with the same prevention lose a mark.
연습
각 위협에 대해 실제로 이를 막을 수 있는 예방 조치가 맞는지 매칭하십시오.
난이도 2/5 · 140 코인 + 오늘 첫 완료 시 소액 보너스
각 예방 조치는 해당 위협에 적합합니다. 한 조치를 반복하거나 해당 위협을 막지 못할措施를 사용할 경우 시험에서 감점됩니다.
English
Restricting the risk of malware
- Install anti-malware software and keep it updated, so that new malware is recognised.
- Use a firewall. Keep the operating system and applications patched, which is exactly what WannaCry's victims had not done.
- Do not open attachments or download files from unknown sources, and train users to recognise phishing.
English
Marks that slip away
Watch out
- The replicating one is the virus; the recording one is spyware. Do not swap the verbs.
- Phishing arrives by email and needs a click; pharming redirects a correct address.
- Give a different prevention for each threat, and one that fits it. "Antivirus" does not stop hacking.
- A measure earns marks with how it works: "a firewall that compares traffic with set criteria and blocks what fails".
English
You've got it
Key idea
- security keeps data safe from loss and unauthorised access · privacy keeps it seen only by those with the right · integrity keeps it accurate, consistent and complete
- protect both the data and the computer system: a compromised system attacks others, steals credentials and can be held to ransom
- virus replicates and attaches · worm spreads over networks by itself · Trojan hides in something useful · spyware records and sends · ransomware encrypts for payment
- phishing by email link · pharming on a correct address · hacking, DoS, eavesdropping, man-in-the-middle on the network