AQA A2 COMP 3: Internet Security

Lesson Aim By the end of the lesson: By the end of the lesson: Describe different security issues and recommend tools/techniques to minimise them. Describe different security issues and recommend tools/techniques to minimise them. Explain the role of a firewall in the context of security. Explain the role of a firewall in the context of security. Use simple encryption techniques. Use simple encryption techniques.

Starter: (8) Find a news article published in the last 5 years about malware security. Find a news article published in the last 5 years about malware security. Identify the type of malware that was involved in the attack. Identify the type of malware that was involved in the attack. Identify the method that was used to access data or cause damage to. Identify the method that was used to access data or cause damage to. Find out what could have been done to prevent it. Find out what could have been done to prevent it.

Types of security issues (15) Virus, Trojan, Worm, Spyware, SPAM, Phishing, Pharming. Virus, Trojan, Worm, Spyware, SPAM, Phishing, Pharming. 1. Pick a security issue from the list. 1. Create a short user guide that will inform the reader about that particular security issue as well as what they can do to prevent it. 2. Note: recommend some software as well.

Firewall Hardware or software Hardware or software Controls traffic between different networks (Internet and private network) Controls traffic between different networks (Internet and private network) Uses rules to control inbound and outbound connections Uses rules to control inbound and outbound connections Traffic is blocked using IP address, domain, port or applications Traffic is blocked using IP address, domain, port or applications Firewalls can also search data packets for exact keywords: where do you think this is used? Firewalls can also search data packets for exact keywords: where do you think this is used?

Outbound connections. Inbound connections. Application process.

Packet filtering TBzAr2Tu0o TBzAr2Tu0o TBzAr2Tu0o TBzAr2Tu0o We set rules. Rules define whether packets are allowed or denied. We set rules. Rules define whether packets are allowed or denied. Proxy server: intermediary device. (middle man). Proxy server: intermediary device. (middle man).

Activity(10) Compare the firewall that comes pre- installed with Windows and the firewall that can be downloaded (third party). Compare the firewall that comes pre- installed with Windows and the firewall that can be downloaded (third party). Which one is better? What features do they offer? Which one is better? What features do they offer? Which one would you use and why? Which one would you use and why?

Encryption Old technique. Old technique. Used on the Internet due to the nature of sensitive data. Used on the Internet due to the nature of sensitive data. encryption: securely transferring data by making the plain text scrambled. encryption: securely transferring data by making the plain text scrambled. Encryption uses algorithm and relies on a key to encrypt and decrypt Encryption uses algorithm and relies on a key to encrypt and decrypt Just like a key for a lock. Just like a key for a lock. (54) (54)

Activity (12)

Recap By the end of the lesson: By the end of the lesson: Describe different security issues and recommend tools/techniques to minimise them. Describe different security issues and recommend tools/techniques to minimise them. Explain the role of a firewall in the context of security. Explain the role of a firewall in the context of security. Use simple encryption techniques. Use simple encryption techniques.

Starter for next lesson Public and private key encryption Public and private key encryption

Interacting with OS Malware software