Skip to content

Unit 3 · Lesson 1

Security threats and responses (1)

6 steps. Each one is a short story and a question to answer.

Student grades are stored on the school computer. Imagine someone getting in and changing them. This is where information security comes in.

It is managing information properly and protecting it from unauthorized access, modification, deletion or theft.

It stands on 3 elements: confidentiality, integrity and availability.

Confidentiality: only the authorized see it. Integrity: correct, unchanged. Availability: reachable when needed.

Information security
ConfidentialityAuthorized only
IntegrityCorrect, unchanged
AvailabilityThere when needed
Information security = confidentiality + integrity + availability

Stopping unauthorized people from seeing the grades protects...

Pick an answer

Information security and its triangle

Information security = confidentiality + integrity + availability. It is managing information properly and protecting it from unauthorized access, modification, deletion or theft. It stands on 3 elements: confidentiality, integrity and availability.

Unauthorized access and cracking

Cracking = actually getting into a system illegally and doing harm. Unauthorized access: someone reaching a system or data without legal permission, possibly stealing, altering or destroying it. Cracking: actually and illegally getting into a system, network or account to manipulate, delete or steal data.

Malware

Malware = harmful programs entering via the web, email, USB drives or networks. Malware is a general term for harmful programs that damage devices, steal data or disable systems. Attackers hide them inside files, websites or messages. When you open or download them, they move onto your device.

Five kinds of malware

Virus, worm, Trojan horse, spyware, ransomware. A virus damages files and slows the device. A worm copies itself and spreads across networks on its own. A Trojan horse disguises itself as a useful program. Spyware gathers your information secretly.

Cybercrime

Cybercrime = an illegal act through computers or networks to harm others or profit unlawfully. Cybercrime is any illegal act done with computers over the internet or networks to gain unlawfully or harm others. It has 3 forms: breaking the unauthorized-access law, crimes involving computers or electronic records, and network-based crimes.

What gets damaged?

Service outage = availability. Password leak = confidentiality. Tampering = integrity. Availability suffers when a service goes down or an attack disables a website. Confidentiality suffers when someone eavesdrops on the network or a password leaks.

Done, see the summary
✕

Security threats and responses (1)

Scroll down ↓ to continue

The lesson on one page

Every idea in the lesson with its rule, ready to screenshot and revise from.

  1. Information security and its triangle

    Information security = confidentiality + integrity + availability

  2. Unauthorized access and cracking

    Cracking = actually getting into a system illegally and doing harm

  3. Malware

    Malware = harmful programs entering via the web, email, USB drives or networks

  4. 4

    Five kinds of malware

    Virus, worm, Trojan horse, spyware, ransomware

  5. Cybercrime

    Cybercrime = an illegal act through computers or networks to harm others or profit unlawfully

  6. 6

    What gets damaged?

    Service outage = availability. Password leak = confidentiality. Tampering = integrity

Test yourself

One question from every step. Answer and see your score.

Question 1 of 6

Stopping unauthorized people from seeing the grades protects...

Watch and listen

Quick reel

Unit 3

Learn what information security means and its triangle (confidentiality, integrity, availability), cracking, the five types of malware, and cybercrime, in an animated explainer.

Share this lessonWhatsApp

The lesson in writing

The same explanation as the 3D scene, written out for quick review.

Information security and its triangle

Information security = confidentiality + integrity + availability. It is managing information properly and protecting it from unauthorized access, modification, deletion or theft. It stands on 3 elements: confidentiality, integrity and availability.

Page 52, 58

Unauthorized access and cracking

Cracking = actually getting into a system illegally and doing harm. Unauthorized access: someone reaching a system or data without legal permission, possibly stealing, altering or destroying it. Cracking: actually and illegally getting into a system, network or account to manipulate, delete or steal data.

Page 53, 58

Malware

Malware = harmful programs entering via the web, email, USB drives or networks. Malware is a general term for harmful programs that damage devices, steal data or disable systems. Attackers hide them inside files, websites or messages. When you open or download them, they move onto your device.

Page 53, 59

Five kinds of malware

Virus, worm, Trojan horse, spyware, ransomware. A virus damages files and slows the device. A worm copies itself and spreads across networks on its own. A Trojan horse disguises itself as a useful program. Spyware gathers your information secretly.

Page 53, 54

Cybercrime

Cybercrime = an illegal act through computers or networks to harm others or profit unlawfully. Cybercrime is any illegal act done with computers over the internet or networks to gain unlawfully or harm others. It has 3 forms: breaking the unauthorized-access law, crimes involving computers or electronic records, and network-based crimes.

Page 54, 55

What gets damaged?

Service outage = availability. Password leak = confidentiality. Tampering = integrity. Availability suffers when a service goes down or an attack disables a website. Confidentiality suffers when someone eavesdrops on the network or a password leaks.

Page 55, 57

Questions about this lesson

What is information security?
Managing information properly and protecting it from unauthorized access, modification, deletion or theft, while keeping it available when needed.
What are the core elements of information security?
Three: confidentiality (only authorized people can see it), integrity (it stays correct and complete) and availability (it can be reached when an authorized user needs it).
What are the types of malware?
Five: viruses, Trojan horses, worms, spyware (like keyloggers and adware) and ransomware.
What is the difference between unauthorized access and cracking?
Unauthorized access is entering a system without permission. Cracking is actually getting in illegally in order to manipulate, delete or steal data.