Cyber security
| English | Chinese | Pinyin |
|---|---|---|
| cyber security | 网络安全 | wǎng luò ān quán |
| malware | 恶意软件 | è yì ruǎn jiàn |
| brute force | 暴力破解 | bào lì pò jiě |
| DDoS | 分布式拒绝服务 | fēn bù shì jù jué fú wù |
| phishing | 网络钓鱼 | wǎng luò diào yú |
| pharming | 域名欺骗 | yù míng qī piàn |
| social engineering | 社会工程 | shè huì gōng chéng |
| virus | 病毒 | bìng dú |
| worm | 蠕虫 | rú chóng |
| Trojan horse | 特洛伊木马 | tè luò yī mù mǎ |
| spyware | 间谍软件 | jiàn dié ruǎn jiàn |
| ransomware | 勒索软件 | lè suǒ ruǎn jiàn |
| firewall | 防火墙 | fáng huǒ qiáng |
| authentication | 身份验证 | shēn fèn yàn zhèng |
Defending against attack
- Cyber security 网络安全 keeps computers, networks and data safe from attack.
- You must know the main threats, the types of malware 恶意软件, and how to protect data.
- Many attacks trick people, not just computers.
Threats
- Brute force 暴力破解 — trying many passwords quickly until one works.
- Data interception — "listening in" to steal data as it travels.
- DDoS 分布式拒绝服务 — flooding a server with requests so it can't respond (the site goes down).
- Hacking — gaining access without permission.
- Phishing 网络钓鱼 — fake messages that trick you into giving details; pharming 域名欺骗 — secret code sends you to a fake site even when you type the right address.
- Social engineering 社会工程 — tricking a person (e.g. pretending to be the boss).
The browser asks a DNS for the site's IP address, then requests the page from the web server, which returns the HTML.
Encryption with a key
Change the shift — that is the key. Each letter slides that many places to make ciphertext, and the same key slides it back. That is symmetric encryption.
A brute force attack works by:
Brute force tries password after password until it gets in.
A DDoS attack:
A distributed denial-of-service overwhelms a server so genuine users can't reach the site.
Phishing tricks you with fake messages into giving away details, while pharming silently redirects you to a fake site even when you type the correct address.
Both aim to steal credentials, but phishing needs you to click; pharming poisons the address lookup itself.
Malware
- Virus 病毒 — attaches to a file and copies itself when the file is opened.
- Worm 蠕虫 — copies itself across a network on its own, with no file needed.
- Trojan horse 特洛伊木马 — pretends to be useful, but harms once installed.
- Spyware 间谍软件 — secretly records what you do (e.g. keystrokes); adware — floods you with adverts; ransomware 勒索软件 — locks your files and demands payment.
A URL has three parts: the protocol, the domain name, and the path to the page on the server.
How does a worm differ from a virus?
A worm self-spreads over networks; a virus needs an infected file to be opened.
Match each item to what it is.
Ransomware extorts; spyware spies; DDoS overwhelms a server.
Keeping data safe
- Access levels (each user sees only what they need), anti-malware, and a firewall 防火墙 (checks and blocks network traffic).
- Authentication 身份验证 — proving who you are: a password, biometrics, or two-step verification.
- Automatic software updates (fix weak points), checking a message's spelling/tone and a link's URL, privacy settings, and a proxy server (hides your IP, filters content).
A firewall sits between the outside internet and your network, checking each connection and blocking any traffic that is not allowed
Two-step verification improves security by:
Adding a second factor (a phone code or biometric) means a stolen password alone is not enough.
You've got it
- threats: brute force, interception, DDoS, hacking, phishing/pharming, social engineering
- malware: virus (file), worm (network), Trojan, spyware, adware, ransomware
- protect with access levels, anti-malware, firewall, authentication/2FA, updates, proxy server
- many attacks target people — check spelling, tone and the URL