☰ خطة العام · تكنولوجيا المعلومات والاتصالات (بالإنجليزية)

Keeping information safe

الأسبوع 2 · الوحدة ٣ «أمن المعلومات»: الأهداف والتهديدات، البرمجيات الخبيثة، كلمات المرور والمصادقة، الحيل التي تخدع الناس، التشفير، التوقيع الرقمي والمواقع الآمنة · 3 دروس
1

Keeping information safe: three aims, many threats

ICT Secondary 1 Term 1, Chapter 3: pp. 24–41
GoalName the three aims of information security and recognise the main kinds of malware.
New words
confidentiality · only the right people can see the informationintegrity · the information is not changed by mistake or on purposeavailability · the information can be used when it is neededmalware · a program made to do harm
Explanation

Think of the marks of your class. Confidentiality means that only the teacher and the pupil can see a mark. Integrity means that nobody changes a mark by mistake or on purpose. Availability means that the marks can be opened on the day the teacher needs them. These three aims are the target of information security, and a threat is anything that harms one of them. Unauthorised access, using a computer or an account without permission, harms confidentiality. A program that changes files harms integrity. A computer that stops working harms availability. Many threats come as malware. A virus attaches itself to a file and needs a person to run that file. A worm spreads by itself over a network. A Trojan horse looks useful but hides harm inside. Spyware collects information secretly, and a keylogger records the keys you press. Adware shows unwanted advertisements; it is not a virus. Ransomware locks files and asks for money. Four habits protect you against most of them: install updates, use security software, keep backup copies, and do not open files or links you did not expect. If something looks wrong, stop and tell a trusted adult.

MalwareWhat it doesMain protection
virusattaches to a file; runs when a person runs the filedo not open unexpected files; security software
wormspreads by itself over a networkupdates; firewall
Trojan horselooks useful, hides harminstall only from trusted sources
spyware / keyloggercollects information, records keyssecurity software; updates
adwareshows unwanted advertscareful installing; security software
ransomwarelocks files and asks for moneybackups; updates; ask a trusted adult
Worked examples
CaseAim harmed
a mark is changedintegrity
server off on exam dayavailability
report card read by a classmateconfidentiality
Three school cases. A pupil opens the marks file and changes his own mark: integrity is harmed. The school server is off on exam morning so nobody can open the papers: availability is harmed. A classmate reads another pupil’s report card: confidentiality is harmed.
A free “drawing helper” is downloaded. It does draw, but it also quietly copies the files in the folder to someone else. It looks useful and hides harm, so it is a Trojan horse. It does not copy itself to other computers, so it is not a worm.
Class activity

On paper, list three files or accounts that matter to you (invented examples are fine, such as a project folder). For each, write one thing you would do to protect it (backup, update, tell an adult before opening a strange file) and which aim it protects.

Practice
1
What are the three aims of information security?
2
A file is locked and the sender asks for money. Which malware is this?
3
What is the difference between a virus and a worm?
4
Why is adware not called a virus?