Module 4, Lesson 3.1

Module 4, Lesson 3.1

By Miranda Cauldwell

​Suspicious Links and URLs

To validate the identity of a site you need to confirm its domain name

​

phishing and pharming:

Techniques to direct users to fake or manipulated websites

​

One trick is to use well-known subdomains as part of the address.

​

“accetrain.phishing.com" in replace of: “acceletrain.com"

​

The browser highlights the registered domain part of the address so that you can verify it.

​

Most browsers run anti-phishing protection to block access to URLs known to be the source of phishing attempts or that host malware.

Phishing and Pharming

​Controls incoming and outgoing traffic; filters good and bad traffic based on polices and rules

​Firewall

•network device between your local network and the Internet. It’s almost like a router with enhanced security features, and in many cases, routers actually include a firewall. Hardware firewalls are a great solution for organizations that want a single firewall system that protects the whole network.

​​Hardware firewall

traffic control program that is installed on an individual device. Most modern operating systems have firewalls built in, though it is possible to install a different or more advanced one, if needed.

​

One benefit to a software firewall is that it is portable and local - it will protect the host on any network, even when you use a laptop on a public Wi-Fi network at an airport.

​​Software firewall

​

IDSes, like they sound, are used only to detect suspicious activity and alert administrators of potential issues

Intrustion Detection Systems

IPSes are used to prevent threats and can block traffic, disconnect users, or take other actions against a potential attack.

Intrusion Prevention System

A virtual private network or VPN enables secure communication using insecure channels using a process called “tunneling.”

Multiple Select

What are techniques to direct users to fake or manipulated websites?

• phishing

• pharming

• adware

• firewall

Multiple Choice

You have installed a screensaver application. Later, after updating your anti-virus software, a malicious program is found. This appears to have infected your system at the same time as the screensaver was installed. What class of malware is this?

• Trojan Horse

• Virus

• Adware

• worm

Multiple Choice

What type of file might a website use to track whether you have visited it before?

• Cookie

• add-on

• cache

Multiple Choice

You are using a computer in an Internet cafe. What should you do at the end of the session?

• Clear the browser cache or use the workstation's browser private/incognito browsing mode.

• Leave a history open of your log in

• Do nothing, leave

Multiple Select

What identifies a website as using the secure HTTPS protocol with a valid certificate?

• padlock

• HTTPS://

• address bar shown in green

• HTTP://