Network Security
Visão Geral
Every network that connects to anything else is a target. Some attacks exploit a technical flaw in software; many more exploit a person, tricked into handing over the one piece of information a well-built firewall cannot stop: their own password. Defending a network means addressing both.
This lesson covers how organisations control who and what can access a network, the specific risks that come with cloud and other modern storage, the technical and behavioural attacks a network must defend against, how vulnerabilities are found before an attacker finds them, and the practices that keep software itself secure by design.
Objetivos
- Understand the importance of network security and be able to use appropriate validation and authentication techniques (access control, physical security and firewalls)
- Understand security issues associated with the cloud and other contemporary storage
- Understand different forms of cyber attack (based on technical weaknesses and behaviour), including social engineering (phishing, shoulder surfing, pharming), unpatched software, USB devices, digital devices and eavesdropping
- Understand methods of identifying vulnerabilities, including penetration testing, ethical hacking, commercial analysis tools and review of network and user policies
- Understand how to protect software systems from cyber attacks, including considerations at the software design stage, audit trails, securing operating systems, secure coding, code reviews, modular testing and effective network security provision
Mapa mental
Este tema esta mapeado para mostrar como as ideias se ligam.
Abra o mapa mental na aplicacao
Cartoes
Pratica rapida de memoria sobre o que e avaliado neste tema.
Pratique estes cartoes na aplicacao
Nota de Aula
Apontamento completo disponivel na aplicacao Green Bridge
Instale a aplicacao Green Bridge CBT no telemovel ou computador para aceder a biblioteca IGCSE completa: exames anteriores, criterios de correcao, mapas mentais, cartoes de estudo e licoes em audio.
Avaliação da Lição
Parabéns por concluir a lição em Network Security. Agora que você explorou o conceitos e ideias-chave, é hora de colocar seu conhecimento à prova. Esta seção oferece uma variedade de práticas perguntas destinadas a reforçar sua compreensão e ajudá-lo a avaliar sua compreensão do material.
Irá encontrar uma mistura de tipos de perguntas, incluindo perguntas de escolha múltipla, perguntas de resposta curta e perguntas de redação. Cada pergunta é cuidadosamente elaborada para avaliar diferentes aspetos do seu conhecimento e competências de pensamento crítico.
Use esta secção de avaliação como uma oportunidade para reforçar a tua compreensão do tema e identificar quaisquer áreas onde possas precisar de estudo adicional. Não te deixes desencorajar pelos desafios que encontrares; em vez disso, vê-os como oportunidades de crescimento e melhoria.
- Which term describes proving that a user is who they claim to be? A) Validation B) Authentication C) Access control D) Encryption Answer: B
- An attacker redirects a user to a fake website even though the user typed the correct web address. This is an example of: A) Phishing B) Shoulder surfing C) Pharming D) Eavesdropping Answer: C
- Which of the following is an authorised, controlled attempt to break into a system to find security weaknesses? A) Hacking B) Penetration testing C) Phishing D) Cracking Answer: B
- Why is unpatched software a common security risk? A) It runs more slowly than updated software B) The vulnerability it contains is often already publicly documented by the update that fixes it C) It cannot connect to a network D) It is always more expensive to maintain Answer: B
- Which of the following best describes an audit trail? A) A firewall rule blocking certain IP addresses B) A log recording user activity on a system C) A password policy for user accounts D) An encrypted connection to a website Answer: B
Resolva estas questoes na aplicacao
Resolva estas questoes na aplicacao
Livros Recomendados
Para aprender mais, fontes abertas
-
Secção do manual
Cybersecurity Deep Dive
"Introduction to Computer Science: Cybersecurity Deep Dive" by OpenStax, OpenStax, Rice University, licensed under CC BY-NC-SA 4.0 (https://creativecommons.org/licenses/by-nc-sa/4.0/). Source: https://openstax.org/books/introduction-computer-science/pages/14-2-cybersecurity-deep-dive. Access for free at https://openstax.org/books/introduction-computer-science/pages/1-introduction
Publicados por outras organizações com licenças abertas e creditados como pedem. As ligações abrem os seus sites.
Pratique Questões Simuladas
Quer praticar questões simuladas sobre Network Security? Descarregue a aplicação Green Bridge CBT para aceder a questões simuladas e avaliações completas sobre este tópico.
Descarregar a aplicação na Google Play Store
Tudo o que precisas para te destacares no JAMB, WAEC e NECO.
