Security Issues | IGCSE Information and Communication Technology Preparation - Year 11 PDF Download

Security Issues

When moving electronic data from one place to another, there are different types of security concerns to consider:

Data Interception

Data interception occurs when an unauthorized user intercepts data being transferred. Common methods include:

• Packet Sniffing: Capturing data packets as they traverse the network, allowing unauthorized access to sensitive information.
• Man-in-the-Middle (MitM) Attack: The attacker intercepts communication between two parties, posing as an intermediary to eavesdrop or manipulate data.

Encryption Vulnerabilities

• Encryption can be compromised if it's not strong enough. 
• Weak encryption algorithms or improper implementation can make encrypted data susceptible to decryption by attackers.

Protocol Insecurity

• Using insecure protocols like HTTP instead of HTTPS when transmitting sensitive information can expose data to interception and unauthorized access. 
• HTTPS provides encryption and authentication, enhancing data security during transmission.

Sensitive Data Transfer

Depending on the sensitivity of the data being transferred, varying levels of security measures may be required to ensure its confidentiality and integrity. Examples include:

• User credentials for online banking.
• Medical records transferred between healthcare providers.
• Student information exchanged between educational institutions.
• Criminal records and details shared between law enforcement agencies.

Protection Against Accidental Disclosures

It's crucial to safeguard personal and sensitive data from accidental disclosures, such as:

• Sending sensitive information to the wrong recipient via email.
• Losing a device containing stored sensitive data, such as a laptop or mobile device.
• Misconfigurations in shared access permissions that grant unauthorized users access to sensitive data. Regular audits and access controls are essential to prevent such incidents.