CSEC INFORMATION TECHNOLOGY · THEORY · LESSON A12

Computer Security, Cybersecurity and the Misuse of Computer Systems

Vulnerabilities, threats, attacks and countermeasures; and the forms of computer misuse such as cyberbullying, data theft, malware, phishing, identity theft, piracy and denial of service, with their effect on individuals, organisations and governments.

Sections 1 to 33.13.2≈ 55 min🎮 3 games
Before you start

By the end of this lesson you can…

Step 1 · Watch

Explainer video

5 narrated scenes. Press play, listen and read along — the points appear as they are explained. Use ‹ Prev / Next › or the scene bar to jump to any scene.

LESSON A12 · EXPLAINER

Computer Security, Cybersecurity and the Misuse of Computer Systems

A fake email, a stolen password or a flood of traffic can shut down a business or empty a bank account. To defend a system you must first understand how it can be attacked.

Narration uses your device’s built-in voice. No sound? Switch to “Captions only” — the captions advance on their own.

Step 2 · Read

Key notes

Copy these into your notebook in your own words — that is how they stick.

Computer security

Protecting systems and data from damage, theft and misuse.

Cybersecurity

Protecting networked systems and the Internet.

Vulnerability / threat

Weakness / thing that could exploit it.

Attack / countermeasure

Actual attempt / action that reduces the risk.

Phishing, identity theft

Trick users into giving details; use someone’s identity.

Malware

Viruses, worms, trojans, spyware, ransomware.

Denial of service

Flooding a server to make it unavailable.

Impact on

Individuals, organisations, governments.

EXAM TIPS & COMMON MISTAKES

  • Use the four-word chain for scenarios: vulnerability → threat → attack → countermeasure.
  • Do not mix up phishing (tricking users) with hacking (breaking in).
  • For impact questions state WHO is affected and the specific harm.
  • Piracy and copyright infringement are about copying protected work, not about viruses.
Play & practise

Games

3 quick games on this lesson. Earn XP and badges as you play — your best score for each game is saved. Games are for practice and do not change your exam readiness. More games in the Information Technology Arcade.

Step 3 · Practise

Paper 1 practice — multiple choice

8 items modelled on real CSEC Paper 1 questions. Choose one answer for each, then check. Aim for 80% or better. Work each item on paper first.

Syllabus 3.1

1. A weakness in a system that could be exploited is called a

Answer: B. A vulnerability is the weakness.
Syllabus 3.1

2. Something that could take advantage of a weakness, such as a hacker, is a

Answer: C. A threat can exploit a vulnerability.
Syllabus 3.2

3. Fake emails that trick users into revealing passwords are an example of

Answer: D. That is phishing.
Syllabus 3.2

4. Flooding a website with so many requests that real users cannot reach it is

Answer: A. That is DoS.
Syllabus 3.2

5. Copying and selling software without the owner’s permission is

Answer: B. Piracy.
Syllabus 3.2

6. Harmful software that locks a user’s files until money is paid is

Answer: C. Ransomware demands payment.
Syllabus 3.2

7. A company loses customers and its reputation after a data breach. This is an impact on a(n)

Answer: D. Organisations suffer financial and reputation loss.
Syllabus 3.2

8. Secretly recording another person’s private messages is

Answer: A. That is eavesdropping, a violation of privacy.
Step 4 · Apply

Paper 2 practice — structured questions

Write full answers, then reveal the mark scheme and tick the points you earned (15 marks in total). Show all your working — method marks count. Your answers are saved on this device.

Paper 2 style · Misuse

Question 1 [15 marks]

A school’s website was slowed down by thousands of requests, and a teacher received an email asking her to “confirm your password” on a fake website.

(a) (a) Name the two types of attack described. [2]

MARK SCHEME — (a) (max 2)

(b) (b) Define the terms vulnerability and countermeasure and give one example of each for the teacher’s email account. [4]

MARK SCHEME — (b) (max 4)

(c) (c) Explain how phishing may harm the teacher. [2]

MARK SCHEME — (c) (max 2)

(d) (d) Assess the impact of a successful denial of service attack on an online shop. [3]

MARK SCHEME — (d) (max 3)

(e) (e) Name two other forms of computer misuse and state one effect of each. [4]

MARK SCHEME — (e) (max 4)

Your progress

Lesson readiness

0%
READY
Not started
Video watched (20%)0%
Multiple choice (40%)0%
Structured (40%)0%

Sources

Where this topic appears in CSEC papers

Find these in your own past-paper booklets for extra timed practice. Items above are written in the style of these papers; any adapted from a specific question say so.