Ch 12Security Aspects — 2nd PUC Computer Science, concept-first.

Security is easiest to guarantee in isolation. A computer with no link to any external device or network is free from the security threats that connectivity brings.

Malware is a portmanteau of the words malicious and software. It refers to any software that is deliberately created to cause harm — whether that means damaging hardware, stealing data, or disrupting…

A computer virus is malicious software, but the name comes from biology. The term was coined by Fred Cohen in 1985, and the parallel with a biological virus is deliberate: a biological virus invades a…

A worm is a type of malware that causes unexpected or damaging behaviour on an infected computer system. What sets it apart from a virus is not what it does, but how it operates and spreads.

Ransomware is malware built around one simple, cruel idea: your data is your most valuable possession, and the attacker will hold it hostage until you pay.

The story of the Trojan horse comes from ancient Greece. The Greeks could not break into the city of Troy by force, so they presented the king with a huge wooden horse.

Spyware is malware built for surveillance. Its entire purpose is to watch a person or an organisation, quietly gather information about them, and pass that information on to someone else — all without…

An adware is a type of malware whose entire purpose is to make money for its creator through online advertising.

A keylogger is a tool designed to record every key a user presses on a keyboard. It can exist as either malware or a physical hardware device.

A malware program, once written, still has to reach your machine before it can do any damage. The book lists four common routes it takes to get there.

The first line of defence against malware is recognising that it exists and that it keeps evolving. No single tool or habit makes a system permanently safe, so the practical approach is a layered one:…

An antivirus is a software program designed to protect a computer system from malicious software. It is also commonly called anti-malware.

Antivirus software does not rely on a single trick to catch malware. Different threats behave differently, so the software uses several complementary methods.

Spam is a broad term that applies across many digital platforms — messaging apps, online forums, chat services, email, and even advertisements. But the form most people recognise is email spam.

Before you type your password into any website, the address bar tells you a story. If the URL begins with http://, the data you send travels in plain text — readable by anyone who intercepts it.

A firewall is a network security system designed to protect a trusted private network from unauthorised access or traffic coming from an untrusted outside network — for example, the Internet, or even…

A firewall is a security tool that filters traffic, but not all firewalls work the same way. The difference comes down to where the firewall is placed and what it is protecting.

The word "cookie" comes from the Unix programmers' term magic cookie — a packet of data that a program receives and then sends back unchanged.

Cookies are small pieces of data a website asks your browser to store, and their usual job is to make your browsing smoother — remembering logins, preferences, or items in a cart.

People who break into computer systems are not always strangers with malicious intent. The section introduces two closely related terms — hackers and crackers — and treats them as people with deep tec…

A white hat hacker is someone who uses their technical knowledge not to break systems, but to find and help fix security flaws.

A hacker who uses their technical skill for illegal or harmful purposes — breaking laws and disrupting security — is called a black hat hacker.

The line between different kinds of hackers is rarely a clean one. While white hats and black hats sit at opposite ends of the spectrum, a large group of people fall somewhere in the middle.

A network security threat is any potential danger that can compromise the confidentiality, integrity, or availability of data travelling over a network.

A Denial of Service (DoS) attack is not about stealing data or breaking into a system. It is about making a resource unusable.

Before the book lists the attacks, it sets the stage with a definition. Network intrusion is any unauthorised activity on a computer network.

Snooping is the act of secretly listening in on a conversation. In networking, that conversation is the stream of data packets moving across a channel, and snooping means capturing and analysing that…

The word eavesdropping comes from an old, literal practice: people would secretly listen to conversations happening inside a house by standing under the eaves — the overhanging edges of the roof.

- Threats are potential dangers to a system; vulnerabilities are weaknesses that threats exploit. A risk is the chance of loss when a threat meets a vulnerability.