Security threats
| English | Chinese | Pinyin |
|---|---|---|
| security | 安全 | ān quán |
| privacy | 隐私 | yǐn sī |
| integrity | 完整性 | wán zhěng xìng |
| malware | 恶意软件 | è yì ruǎn jiàn |
| virus | 病毒 | bìng dú |
| worm | 蠕虫 | rú chóng |
| Trojan | 木马 | mù mǎ |
| ransomware | 勒索软件 | lè suǒ ruǎn jiàn |
| phishing | 网络钓鱼 | wǎng luò diào yú |
| denial of service | 拒绝服务 | jù jué fú wù |
| man-in-the-middle | 中间人攻击 | zhōng jiān rén gōng jī |
| social engineering | 社会工程 | shè huì gōng chéng |
Security 安全, privacy 隐私, integrity 完整性
- These three words sound alike but mean different things.
- Getting them straight is the foundation of this whole topic.
- Then we meet the threats that attack them.
Risk and responsibility lab
Sort examples by the rule, risk or protection involved.
Three different ideas
- Security — protecting data from unauthorised access, change or destruction.
- Privacy — a person's right to control who sees their personal data (with consent and a clear purpose).
- Integrity — data being accurate and complete — not corrupted or accidentally changed.
- A file can be secure but corrupted (no integrity), or accurate but readable by anyone (no privacy). You need all three.
A security token shows a changing code for two-factor authentication (something you have)
Which best describes data "integrity"?
Integrity = accurate and complete. Security = blocking unauthorised access; privacy = control over personal data.
Privacy is about a person controlling who sees their personal data, while security is about stopping unauthorised access.
They overlap but differ: security blocks intruders; privacy is control over personal data; integrity is about accuracy.
Malware 恶意软件
| Type | What it does |
|---|---|
| Virus 病毒 | self-copying code that attaches to programs and spreads when they run |
| Worm 蠕虫 | self-copying code that spreads over networks with no user action |
| Trojan 木马 | looks useful but hides malicious code |
| Spyware | secretly collects information (keystrokes, passwords) |
| Ransomware 勒索软件 | encrypts your files and demands payment |
| Adware | pushes unwanted adverts |
A fingerprint reader checks "something you are" — a feature of the person, not a password
How does a worm differ from a virus?
A worm self-propagates across networks without user action; a virus needs an infected program to be run.
Malware that encrypts your files and demands payment for the key is called ______.
Ransomware encrypts the victim's files and demands a ransom for the decryption key.
Match each type of malware to its behaviour.
Spyware spies, a Trojan disguises itself, and a worm self-spreads across networks.
Other threats
- Phishing 网络钓鱼 — fake emails/sites that trick users into giving credentials.
- Hacking — unauthorised access, often via weak passwords or software flaws.
- Denial of service 拒绝服务 (DoS/DDoS) — floods a server so real users can't reach it.
- Eavesdropping — capturing data in transit (a risk on open Wi-Fi); man-in-the-middle 中间人攻击 — secretly relaying or altering messages.
- Social engineering 社会工程 — tricking people into giving up information.
- Threats include pharming and hackers; defences protect the security of data and the security of the computer system with anti-virus software, anti-spyware, authentication techniques (passwords, biometrics, digital signatures), user accounts and access rights.
A man-in-the-middle attacker sits between the two parties
Phishing is:
Phishing deceives users into revealing passwords or details via fake messages/sites.
A denial-of-service (DoS/DDoS) attack:
DoS/DDoS overwhelms a server with traffic so legitimate requests can't get through.
You've got it
- security (block unauthorised access) · privacy (control over personal data) · integrity (accurate + complete)
- virus spreads via programs; worm spreads over networks with no user action
- ransomware encrypts files for payment; Trojan hides in something useful
- phishing, DoS/DDoS, man-in-the-middle, social engineering are key network threats