AQA A2 COMP 3: Internet Security. Lesson Aim By the end of the lesson: By the end of the lesson: Describe different security issues and recommend tools/techniques.

AQA A2AQA A2

COMP 3: Internet SecurityCOMP 3: Internet Security

Lesson AimLesson Aim By the end of the lesson:By the end of the lesson:

Describe different security issues and Describe different security issues and recommend tools/techniques to minimise recommend tools/techniques to minimise them.them.

Explain the role of a firewall in the context Explain the role of a firewall in the context of security.of security.

Use simple encryption techniques.Use simple encryption techniques.

Starter: (8) Starter: (8) Find a news article published in the last 5 Find a news article published in the last 5

years about malware security.years about malware security.

Identify the type of malware that was Identify the type of malware that was involved in the attack.involved in the attack.

Identify the method that was used to Identify the method that was used to access data or cause damage to.access data or cause damage to.

Find out what could have been done to Find out what could have been done to prevent it. prevent it.

Types of security issues (15)Types of security issues (15) Virus, Trojan, Worm, Spyware, SPAM, Virus, Trojan, Worm, Spyware, SPAM,

Phishing, Pharming.Phishing, Pharming.

1.1. Pick a security issue from the list.Pick a security issue from the list.

1.1. Create a short user guide that will inform Create a short user guide that will inform the reader about that particular security the reader about that particular security issue as well as what they can do to prevent issue as well as what they can do to prevent it.it.

2.2. Note: recommend some software as well.Note: recommend some software as well.

FirewallFirewall Hardware or softwareHardware or software Controls traffic between different networks Controls traffic between different networks

(Internet and private network)(Internet and private network) Uses rules to control inbound and Uses rules to control inbound and

outbound connectionsoutbound connections Traffic is blocked using IP address, Traffic is blocked using IP address,

domain, port or applicationsdomain, port or applications Firewalls can also search data packets for Firewalls can also search data packets for

exact keywords: where do you think this is exact keywords: where do you think this is used?used?

Outbound connections.

Inbound connections.

Application process.

Packet filteringPacket filtering http://www.youtube.com/watch?v=Z

TBzAr2Tu0o

We set rules. Rules define whether We set rules. Rules define whether packets are allowed or denied.packets are allowed or denied.

Proxy server: intermediary device. Proxy server: intermediary device. (middle man).(middle man).

Activity(10)Activity(10) Compare the firewall that comes pre-Compare the firewall that comes pre-

installed with Windows and the installed with Windows and the firewall that can be downloaded firewall that can be downloaded (third party).(third party).

Which one is better? What features Which one is better? What features do they offer?do they offer?

Which one would you use and why?Which one would you use and why?

EncryptionEncryption Old technique.Old technique. Used on the Internet due to the Used on the Internet due to the

nature of sensitive data.nature of sensitive data. encryption: securely transferring data encryption: securely transferring data

by making the plain text scrambled.by making the plain text scrambled. Encryption uses algorithm and relies Encryption uses algorithm and relies

on a key to encrypt and decrypton a key to encrypt and decrypt Just like a key for a lock.Just like a key for a lock. (54)(54)

Activity (12)Activity (12)

RecapRecap By the end of the lesson:By the end of the lesson:

Describe different security issues and Describe different security issues and recommend tools/techniques to minimise recommend tools/techniques to minimise them.them.

Explain the role of a firewall in the context Explain the role of a firewall in the context of security.of security.

Use simple encryption techniques.Use simple encryption techniques.

Starter for next lessonStarter for next lesson Public and private key encryptionPublic and private key encryption

Interacting with OS Malware software