Identifying and preventing vulnerabilities
Prevention Methods
Prevention methods are steps taken to protect computer systems and data from unauthorised access and attack. Each method has a main purpose, so you can recognise it from a short description of what it does.
The seven common prevention methods
| Method | Main purpose |
|---|---|
| Penetration testing | Authorised experts try to break into a system so weaknesses can be found and fixed. |
| Anti-malware software | Scans for and blocks or removes malicious software. |
| Firewall | Monitors and filters network traffic using rules. |
| Encryption | Scrambles data so it can only be read with the correct key. |
| Passwords | Requires a secret value before a user can log in. |
| User access levels | Gives each user only the permissions needed for their role. |
| Physical security | Limits who can reach hardware, using locks and key cards; CCTV and guards deter intruders. |
Using more than one method
No single prevention method stops every attack. A firewall can filter network traffic, but it does not remove malware already stored on a computer. Encryption can make data unreadable if it is stolen, but it does not stop an attacker from flooding a website with traffic to take it offline. Using several methods together covers different threats and leaves fewer gaps.
When you choose methods for a scenario, match each one to the specific threat. For example, a small online board game shop stores customer order details. It uses encryption so order files are unreadable without the key if the storage device is stolen, anti-malware software to scan staff laptops for malicious programs, and user access levels so a compromised staff account cannot change every order record. Each method addresses a different risk, and together they protect the system better than any one method alone.
Practise this
OCR GCSE Computer Science · Identifying and preventing vulnerabilities