Module 6.3- Secure Web Browsing Flashcards

(19 cards)

1
Q

Understanding Malware

A
  • malware is a broad term for malicious software designed to harm, exploit, or take control of a computer system without the user’s consent
  • common types of Malware:
    1. Viruses
    2. Spyware
    3. Ransomware
    4. Adware
    5. Trojan Horses
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Viruses

A
  • just like biological viruses, computer viruses attach themselves to legitimate programs or files and spread when those files are shared or opened
  • they can corrupt or delete data, steal personal information, or hijack system resources
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Spyware

A
  • this type of malware covertly monitors and collects information from your computer, like browsing habits or passwords without your knowledge
  • it often comes bundled with other software
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Ransomware

A
  • locks your files or system and demands payment (ransom) to restore access
  • has become a major threat to businesses and individuals alike
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Adware

A
  • while not always malicious, adware generates unwanted ads on your device and can slow down your browsing experience
  • often bundled with free software downloads
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Trojan Horses

A
  • trojans disguise themselves as legitimate software
  • once installed, they create backdoors, allowing hackers to access and control your system
  • e.g. if you download software from an untrusted site, you could unknowingly install a Trojan horse that provides remote access to your computer- once compromised, attackers can steal sensitive data or control your machine for malicious activities
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Safe Web Browsing Practices

A
  1. Keep your Browser and Software up to date
  2. Use strong, unique Passwords
  3. Enable 2-Factor Authentication (2FA)
  4. Beware of Phishing
  5. Look for HTTPS
  6. Use a Secure Wi-Fi Connection
  7. Install Security Extensions
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Keep your Browser and Software up to date

A
  • always make sure your web browser, OS, and any installed software are updated to the latest versions
  • security patches are regularly released to fix vulnerabilities that attackers could exploit
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Use strong, unique Passwords

A
  • one of the easiest ways to improve online security is by using strong, unique passwords for every account
  • a password manager can help you keep track of them and generate secure passwords
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Enable 2FA

A
  • many websites and services offer 2FA, which adds an extra layer of protection by requiring a second form of verification (like a code sent to your phone) in addition to your password
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Beware of Phishing

A
  • phishing attacks attempt to trick you into providing personal information by impersonating legitimate websites or services
  • always double-check URLs and avoid clicking on suspicious links in emails or messages
  • if something seems off, verify it independently by going directly to the website
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Look for HTTPS

A
  • always check that the websites you visit use HTTPS, indicated by the padlock icon in the browser’s address bar
  • HTTPS encrypts data between your browser and the website, protecting it from being intercepted
  • never enter sensitive information, like passwords or credit card numbers, on websites without HTTPS
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Use a Secure Wi-Fi Connection

A
  • when browsing or entering sensitive information online, make sure you’re connected to a secure Wi-Fi network
  • avoid using public WiFi for transactions like online shopping or banking, unless you’re using a VPN (Virtual Private Network) to encrypt your traffic
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Install Security Extensions

A
  • tools like HTTPS Everywhere, Privacy Badger, or uBlock Origin can help block trackers, enforce secure connections, and reduce exposure to malware-laden ads
  • e.g. if you’re doing online banking, make sure the website uses HTTPS and, if possible, enable two-factor authentication to further secure your login process
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Digital Certificates & HTTPS

A
  • one of the key components of secure web browsing is understanding digital certificates and their role in establishing secure connections
  • whenever you visit a website, especially one that requires sensitive information, you want to ensure that your connection is private and safe from eavesdroppers
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are Digital Certificates?

A
  • digital certificates are electronic documents used to verify the identity of a website or organisation
  • when you visit a site that uses HTTPS, your browser checks the digital certificate to ensure that the site is legitimate and that your data will be encrypted
17
Q

How Digital Certificates & HTTPS work

A
  • HTTPS (Hypertext Transfer Protocol Secure)- when a website uses HTTPS, it means that your connection to the site is encrypted, making it harder for attackers to intercept data like login credentials or credit card information
  • SSL/TLS Certificates- digital certificates that authenticate a website
  • SSL (Secure Sockets Layer) and its successor, TLS (Transport Layer Security), ensure that data transferred between your browser and the website is encrypted and secure
18
Q

Types of Certification

A
  1. Domain Validated (DV)- these are the most basic certificates, verifying only that the owner of the domain has control over it
  2. Organisation Validated (OV)- these provide more detailed verification, including information about the organisation owning the site
  3. Extended Validation (EV)- EV certificates offer the highest level of trust and are often used by financial institutions
    - when you visit a site with an EV certificate, the browser’s address bar may display the name of the organisation in green
19
Q

Why do Digital Certificates matter?

A
  • help ensure that you’re communicating with the intended website and that your data remains encrypted, preventing man-in-the-middle attacks where an attacker could intercept or alter your communications
  • e.g. when you’re logging into your bank’s website, the presence of an EV certificate and HTTPS assures you that you’re interacting with the legitimate site and not a fraudulent copy