1.6.6

Information Security

Test yourself on Information Security

Test your knowledge with free interactive questions on Seneca — used by over 10 million students.

Data Interception

Data interception is an increasing threat to the security of organisations.

Data as a commodity

Data as a commodity

  • Data is a very valuable commodity.
  • Personal data can be used to impersonate individuals to gain access to their assets.
  • Outsiders can exploit the financial data or trade secrets of organisations to gain a competitive advantage.
Data theft

Data theft

  • Data theft is a serious concern for any organisation.
  • The loss of customers' personal data can result in significant fines.
  • Data theft can happen as part of different methods such as:
    • Insider attacks.
    • Man-in-the-middle attacks.
    • Packet sniffing.
Protection from data theft

Protection from data theft

  • Data interception and theft is best prevented by employing a range of preventative measures such as:
    • Encrypting data.
    • User access levels.
    • Network policies.
    • Educating users.

Methods of Data Interception

There are three main methods of data interception: insider attacks, man-in-the-middle attacks, and packet sniffing.

Insider attacks

Insider attacks

  • An insider attack is where someone with privileged access to information (e.g. an employee) uses their access to steal information from the company, and gives it to others.
  • Attackers often have financial or ethical motivations.
  • The risk of insider attacks can be reduced using:
    • Firewalls.
    • User access levels.
Man-in-the-middle attacks

Man-in-the-middle attacks

  • A man-in-the-middle (MITM) attack is where an attacker will intercept a device's connection to the Internet.
  • This is often done by tricking users into signing into a fake WiFi hotspot.
  • The man-in-the-middle can then see all of the victim's traffic, such as personal information.
  • This is one of the reasons why users should be very careful if they join a public WiFi network.
Packet sniffing

Packet sniffing

  • Packet sniffing is where a hacker will intercept data as it is being transmitted across a network.
  • Sniffing software reads and displays the content of all packets being sent on a network.
  • Packet sniffing is a form of passive attack.
  • One of the best ways to protect against packet sniffing is to use encryption so that packets cannot be decoded.
Jump to other topics
1

Computer Systems

1.1

Data Representation

1.1.1Binary Numbers1.1.2Negative Binary Numbers1.1.3Hexadecimal1.1.4Using Hexadecimal1.1.5Converting Binary & Hexadecimal1.1.6Converting Denary & Hexadecimal1.1.7Capacity1.1.8Calculating Capacity Requirements1.1.9Binary in Computer Systems1.1.10Data Compression1.1.11Run Length Encoding1.1.12File Formats
1.2

Data Transmission

1.2.1Packet Switching1.2.2Data Transmission1.2.3Universal Serial Bus (USB)1.2.4Parity Check1.2.5Checksum & Echo Checks1.2.6Encryption
1.3

Hardware

1.3.1Elements of Computer Systems1.3.2Types of Computer System1.3.3Von Neumann Architecture1.3.4The Fetch, Decode, Execute Cycle1.3.5Factors Affecting CPU Performance1.3.6Computational Logic1.3.7Input Devices1.3.82D & 3D Scanners1.3.9Code Readers1.3.10Solid State Storage1.3.11Magnetic Storage1.3.12Examples of Magnetic Storage1.3.13Optical Storage1.3.14Examples of Optical Storage1.3.15Types of Optical disk1.3.16Storage Requirements1.3.17Translation - Compilers1.3.18Translation - Interpreters1.3.19Translation - Assemblers1.3.20Acoustic Sensors1.3.21Flow Sensors1.3.22Gas Sensors1.3.23Humidity Sensors1.3.24Infrared Sensors1.3.25Level Sensors1.3.26Light Sensors1.3.27Magnetic Field Sensors1.3.28Moisture Sensors1.3.29pH Sensors1.3.30Pressure Sensors1.3.31Proximity Sensors1.3.32Temperature Sensors1.3.33Network Hardware
1.4

Software

1.4.1Operating Systems1.4.2Interrupts1.4.3High-Level Languages1.4.4Low-Level Languages
1.5

The Internet & its Uses

1.5.1The Internet1.5.2Uniform Resource Locators (URLs)1.5.3DNS1.5.4HTML1.5.5Cookies1.5.6Web Hosting1.5.7Digital Currency
1.6

Cyber Security

1.6.1Forms of Attack1.6.2Penetration Testing1.6.3Types of Malware1.6.4How Malware Spreads1.6.5Protecting Against Malware1.6.6Information Security1.6.7Structured Query Language (SQL) Injection1.6.8Firewalls1.6.9Authentication: User Access Levels1.6.10Authentication: Passwords1.6.11Social Engineering1.6.12Phishing1.6.13Denial of Service Attacks
1.7

Automated & Emerging Technologies

1.7.1Automated Systems1.7.2Robotics1.7.3Artificial Intelligence
2

Algorithms, Programming & Logic

2.1

Algorithm Design & Problem Solving

2.1.1Computational Thinking - Abstraction2.1.2Computational Thinking - Decomposition2.1.3Computational Thinking - Algorithmic Thinking2.1.4Pseudocode2.1.5Flow Diagrams2.1.6Interpreting, Correcting & Completing Algorithm2.1.7Correcting Algorithms2.1.8Completing Algorithms2.1.9Testing2.1.10Types of Testing2.1.11Test Plans2.1.12Validation & Sanitation2.1.13Authentication & Contingencies
2.2

Programming

2.2.1Programming Fundamentals - Variables & Constants2.2.2Programming Fundamentals - Comments2.2.3Programming Fundamentals - Input & Output2.2.4Data Types2.2.5Casting2.2.6Controlling Program Flow - Sequence2.2.7Controlling Program Flow - Selection2.2.8Controlling Program Flow - Iteration2.2.9Modularity - Subroutines2.2.10Modularity - Scope2.2.11Arrays
2.3

Databases

2.3.1Structuring Data - Records2.3.2Structuring Data - Databases2.3.3SQL
2.4

Boolean Logic

2.4.1Binary Systems2.4.2Logic Circuits2.4.3Truth Tables2.4.4Evaluating Expressions2.4.5Boolean Operators2.4.6End of Topic Test - Logic

Practice questions on Information Security

Can you answer these? Test yourself with free interactive practice on Seneca — used by over 10 million students.

  1. 1
    Types of data theft attacks:Fill in the list
  2. 2
    Aside from ethical reasons, what encourages companies to keep personal data secure?Multiple choice
  3. 3
    Methods of preventing data theft:Fill in the list
  4. 4
    A Man-in-the-Middle AttackPut in order
  5. 5
    Methods of data interception:Fill in the list
Answer all questions on Information Security

Unlock your full potential with Seneca Premium

  • Unlimited access to 10,000+ open-ended exam questions

  • Mini-mock exams based on your study history

  • Unlock 800+ premium courses & e-books

Get started with Seneca Premium

Protecting Against Malware

Structured Query Language (SQL) Injection