IS Security

Match the security attacks and their definition

• Rogue Access Points

• General term for malicious software designed to harm, disrupt, or gain unauthorized access to computer systems.

• Malware

• The act of driving around with a Wi-Fi-enabled device to locate and map unsecured or poorly secured wireless networks.

• Virus

• A type of malware that attaches itself to legitimate programs or files and replicates when those programs are executed, spreading from one host to another.

• Worms

• Self-replicating malicious programs that spread automatically through networks without needing to attach to other files or rely on human action.

• War Driving

• Unauthorized wireless access points installed inside a network (often by employees or attackers) that create hidden entryways for intruders

Match the security attacks and their definition

• Ransomware

• Software that secretly collects information about a user’s activities, such as browsing habits, keystrokes, or personal data, without their consent.

• Spyware

• A cyberattack that inserts malicious SQL code into input fields of a web application to manipulate or steal data from the database.

• SQL Injection

• Malicious software that encrypts a victim’s files or system and demands payment (a ransom) to restore access.

• Trojan Horse

• A deceptive program that appears legitimate but secretly carries harmful code, allowing attackers to access or damage systems once installed.

Digital systems today face many forms of security threats. Individuals who explore systems without permission, often out of curiosity or for personal challenge, are called (a)   . Those who intentionally break into systems to steal or destroy data are known as (b)   . When an attacker successfully gains unauthorized access to a company’s computer network, it is considered a (c)   . If this leads to corrupted files or loss of data, it results in (d)   . Some attackers go further by defacing websites or posting offensive messages online—an act known as (e)   .

• Hackers
• Crackers
• System Intrusion
• System Damage
• Cybervandalism
• Explorers
• Data Miners
• Network Breach

Many online scams aim to trick users into revealing sensitive information. One of the most common is ​ (a)   , where attackers send fake emails or messages pretending to be from trusted organizations to steal passwords or credit-card details. A more sophisticated version, called ​ (b)   , involves setting up a fake Wi-Fi hotspot that looks identical to a legitimate one, luring users to connect so their data can be intercepted. Another technique, known as ​ (c)   , redirects users from real websites to fraudulent copies without their knowledge, capturing login credentials and personal information.

• evil twins
• phishing
• pharming
• data mining
• social engineering
• identity theft

Organizations secure their digital infrastructure through a combination of network and user protection tools. A ​ (a)   serves as the main barrier between internal systems and the internet, controlling data flow based on security rules. To filter unwanted or harmful traffic, ​ (b)   is applied to inspect each data packet before it enters the network. Suspicious activity that bypasses these controls can be detected by an (c)   , which alerts administrators to possible breaches. Wireless connections are safeguarded using ​ (d)   encryption standards, while remote employees access company resources safely through a (e)   that creates an encrypted tunnel over the internet.

• firewall
• packet filtering
• intrusion detection system
• WAP2
• VPN
• data leak prevention
• malware scanner
• proxy server

Beyond network defense, protecting user identity and data integrity is equally critical. (a)   ensures that only verified individuals can access systems or data. Once users are inside, (b)   programs protect against malicious code, and (c)   tools block hidden software that monitors user activity. Sensitive information is secured with (d)   , transforming readable data into coded form. Finally, (e)   technology builds trust online by verifying the legitimacy of websites and communication partners.

• Authentication
• antivirus
• antispyware
• encryption
• digital certificate
• Authorization
• malware
• firewall