What is anti-virus software?
Software that prevents, detects, and removes malware from devices.
What is signature detection in anti-virus software?
Identifies malware by comparing patterns in malicious code to known signatures (like fingerprints).
What is heuristic detection in anti-virus software?
Detects malware by monitoring program behavior for suspicious activity, without requiring known signatures.
Common features of anti-virus software?
- Scheduled scans (HDD, folders, external storage)
- On-access scanning when files are opened
Limitations/implications of anti-virus software?
- Must be regularly updated for new malware
- Not 100% effective, cannot block hackers
- Can slow PC and network performance
What is a firewall?
Monitors incoming and outgoing network traffic and blocks suspicious activity.
What is** packet filtering in firewalls**?
Inspects data packets against predefined security rules; blocks flagged packets.
Other firewall techniques?
- Content filtering: Allows some traffic, blocks others
- Program control: Controls which programs can access the LAN/Internet
Limitations/implications of firewalls?
- Can diminish network performance
- Software firewalls slow systems if run 24/7
- Cannot stop internal attacks
- Viruses can alter firewall settings
What is encryption?
Converting data into a coded format to prevent unauthorized access.
Difference between data at rest and data in transit encryption?
Data at rest: Stored data; uses symmetric (private key) encryption
Data in transit: Data sent over networks; uses asymmetric (public key) encryption
What is an encryption key?
A value (128 or 256 bits) applied to an encryption algorithm to encode/decode data.
Implications of encryption?
- Losing the encryption key = data lost forever
- Sharing the key = security compromise
Important legislation for data protection?
- Data Protection Act/GDPR (2018): Regulates use and handling of personal data
- Computer Misuse Act (1990): Protects against IT system damage and unauthorized access
What are codes of practice?
Guidelines to help businesses comply with laws; not legally binding.
Who enforces the Data Protection Act and GDPR?
The ICO (Information Commissioner’s Office); breaches can result in substantial fines.
