📚 GCSE WJEC Computer Science: Cybersecurity Exam Focus | GCSE WJEC 计算机：网络安全 考点精讲
Cybersecurity is one of the most dynamic and examined topics in the WJEC GCSE Computer Science specification. It explores the threats that individuals and organisations face in the digital world, alongside the technical and legal countermeasures designed to protect systems, networks, and data. This article breaks down every essential concept, from malware and social engineering to encryption and legislation, providing clear explanations and exam-ready analysis.
网络安全是 WJEC GCSE 计算机科学课程中最活跃、考查频率最高的主题之一。它探索个人和组织在数字世界中面临的威胁，以及为保护系统、网络和数据而设计的技术和法律对策。本文将拆解每一个重要概念，从恶意软件、社会工程学到加密与立法，提供清晰的解释和面向考试的分析。
1. The Importance of Cybersecurity | 网络安全的重要性
Cybersecurity refers to the protection of computer systems, networks, and data from digital attacks, damage, or unauthorised access. As society becomes increasingly reliant on digital infrastructure – from online banking to healthcare records – the consequences of a security breach have grown more severe. Financial loss, identity theft, reputational damage, and even threats to national security can all result from inadequate cyber defences. In the WJEC exam, you will be expected to identify threats and justify appropriate security measures in real-world scenarios.
网络安全是指保护计算机系统、网络和数据免受数字攻击、破坏或未经授权的访问。随着社会日益依赖数字基础设施——从网上银行到医疗记录——安全漏洞的后果愈发严重。经济损失、身份盗用、声誉受损，甚至对国家安全的威胁，都可能源自不充分的网络防御。在 WJEC 考试中，你需要识别威胁，并在真实场景中论证合适的安全措施。
2. Malware: Viruses, Worms, Trojans and Ransomware | 恶意软件：病毒、蠕虫、木马和勒索软件
Malware (malicious software) is any program designed to inflict harm. A virus attaches itself to legitimate files and spreads when the file is executed, often corrupting data. A worm is self-replicating and can spread across networks without user intervention, consuming bandwidth and overloading systems. A Trojan horse disguises itself as legitimate software but carries a hidden malicious payload, such as creating backdoors for hackers. Ransomware encrypts a victim’s files and demands payment for the decryption key. Exam questions frequently ask you to distinguish between these types and suggest removal strategies, such as using anti-malware tools and isolating infected devices.
恶意软件是指任何旨在造成损害的程序。病毒附着在合法文件上，并在文件执行时传播，通常会破坏数据。蠕虫能够自我复制，并在无需用户干预的情况下跨网络传播，消耗带宽并使系统过载。特洛伊木马伪装成合法软件，但携带隐藏的恶意负载，例如为黑客创建后门。勒索软件会加密受害者的文件，并要求支付赎金以获取解密密钥。考试中经常要求区分这些类型，并提出清除策略，例如使用反恶意软件工具和隔离受感染设备。
| Type | 类型 | Propagation | 传播方式 | Primary Effect | 主要影响 |
|---|---|---|
| Virus | 病毒 | Attached to files | 附着于文件 | Corrupts/deletes data | 损坏/删除数据 |
| Worm | 蠕虫 | Self-replicates via network | 通过网络自我复制 | Consumes resources, slows systems | 消耗资源，拖慢系统 |
| Trojan horse | 特洛伊木马 | Disguised as legitimate software | 伪装成合法软件 | Creates backdoors, steals data | 创建后门，窃取数据 |
| Ransomware | 勒索软件 | Via phishing or exploit kits | 通过钓鱼或漏洞利用工具包 | Encrypts files, demands ransom | 加密文件，索要赎金 |
3. Social Engineering: Manipulating Human Behaviour | 社会工程学：操纵人的行为
Social engineering exploits human psychology rather than technical vulnerabilities. Common techniques include phishing (fraudulent emails or messages designed to trick users into revealing credentials), pretexting (creating a fabricated scenario to obtain sensitive information), baiting (offering something enticing, like a free USB drive infected with malware), and tailgating (following authorised personnel into restricted areas). WJEC questions often present a scenario where an employee receives a suspicious email – candidates should recognise this as a social engineering attempt and recommend staff training and verification protocols as countermeasures.
社会工程学利用的是人类心理而非技术漏洞。常见技术包括网络钓鱼（旨在诱骗用户透露凭证的欺诈性电子邮件或消息）、托词（编造情景以获取敏感信息）、诱饵（提供诱人的物品，例如带有恶意软件的免费 U 盘）和尾随（跟随授权人员进入限制区域）。WJEC 考题经常呈现员工收到可疑电子邮件的场景——考生应将其识别为社会工程学尝试，并建议通过员工培训和验证程序作为对策。
4. Network-Based Attacks: DoS, DDoS and SQL Injection | 基于网络的攻击：DoS、DDoS 和 SQL 注入
A Denial of Service (DoS) attack floods a server with traffic so that legitimate users cannot access it. A Distributed DoS (DDoS) uses multiple compromised computers (a botnet) to launch the attack simultaneously, making it harder to stop. SQL injection targets websites that take user input and incorporate it into database queries without proper validation. By entering malicious SQL code, an attacker can view, modify, or delete data. Mitigation methods include firewalls, intrusion detection systems, rate limiting, and input sanitisation (using parameterised queries). When answering exam questions, always link the attack to a specific prevention technique.
拒绝服务攻击通过向服务器灌入大量流量使合法用户无法访问。分布式拒绝服务攻击使用多台被入侵的计算机（僵尸网络）同时发起攻击，使其更难阻止。SQL 注入攻击针对那些接受用户输入并将其直接用于数据库查询而未进行适当验证的网站。通过输入恶意 SQL 代码，攻击者可以查看、修改或删除数据。缓解方法包括防火墙、入侵检测系统、速率限制和输入清理（使用参数化查询）。在回答考试问题时，始终将攻击与具体的预防技术联系起来。
5. Data Protection Principles (GDPR) | 数据保护原则（通用数据保护条例）
Although the UK has adopted its own Data Protection Act, the core principles align with the GDPR. Data must be processed lawfully, fairly, and transparently; collected for specified, explicit, and legitimate purposes; adequate, relevant, and limited to what is necessary; accurate and kept up to date; kept for no longer than necessary; and processed in a manner that ensures appropriate security. In WJEC exams, you may be asked how an organisation can comply with these principles – for example, by using access controls, encryption, and regular data audits.
尽管英国已通过自己的《数据保护法》，但核心原则与 GDPR 一致。数据必须合法、公平、透明地处理；为了特定、明确且合法的目的而收集；充分、相关且限于必要范围；准确并保持更新；保存期限不超过必要时间；并以确保适当安全的方式处理。在 WJEC 考试中，你可能会被问到组织如何遵守这些原则——例如，通过使用访问控制、加密和定期数据审计。
6. Security Measures: Hardware and Software Tools | 安全措施：硬件与软件工具
Organisations deploy multiple layers of defence. A firewall monitors and controls incoming and outgoing network traffic based on predetermined security rules, blocking unauthorised access. Anti-malware software scans for and removes malicious programs, while keeping a regularly updated signature database. Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) analyse traffic patterns to spot anomalies. Access control mechanisms – such as usernames, strong passwords, and biometrics – restrict system entry to authorised users. Physical security, including locked server rooms and CCTV, prevents direct tampering with hardware.
组织会部署多层防御。防火墙根据预设的安全规则监控并控制进出网络流量，阻止未经授权的访问。反恶意软件会扫描并删除恶意程序，同时保持签名数据库的定期更新。入侵检测系统和入侵防御系统分析流量模式以发现异常。访问控制机制——如用户名、强密码和生物识别——将系统入口限制为只有授权用户。物理安全，包括锁闭的服务器机房和 CCTV，可防止对硬件的直接篡改。
7. Encryption and Authentication | 加密与认证
Encryption scrambles data into an unreadable form using an algorithm and a key; only someone with the correct key can decrypt it. Symmetric encryption uses the same key for both encryption and decryption, whereas asymmetric encryption (public-key cryptography) uses a public key to encrypt and a private key to decrypt. Secure websites use HTTPS, which relies on SSL/TLS protocols to encrypt data between the browser and server. Two-factor authentication (2FA) adds an extra layer of security by requiring not only a password but also a temporary code sent to a mobile device. Exam answers should explain why encryption protects confidentiality and why 2FA reduces the risk of unauthorised access even if a password is stolen.
加密使用算法和密钥将数据打乱为不可读的形式；只有拥有正确密钥的人才能解密。对称加密使用相同的密钥进行加密和解密，而非对称加密（公钥加密）使用公钥加密、私钥解密。安全网站使用 HTTPS，它依赖 SSL/TLS 协议加密浏览器与服务器之间的数据。双因素认证通过不仅要求密码，还要求发送到移动设备的一次性验证码来增加一层额外的安全保障。考试答案应解释为什么加密能保护机密性，以及为什么即使密码被盗，双因素认证也能降低未经授权访问的风险。
8. Acceptable Use Policies and Network Usage | 可接受使用策略与网络使用规范
An Acceptable Use Policy (AUP) is a set of rules applied by an organisation that defines what users are and are not allowed to do with its IT systems and networks. It typically covers restrictions on accessing inappropriate content, prohibitions on installing unauthorised software, requirements for handling company data, and consequences for policy violations. WJEC questions may present a scenario where an employee downloads a game onto a work computer; the answer should refer to the AUP and explain how it helps protect the organisation from malware, legal liability, and productivity loss.
可接受使用策略是组织实施的一套规则，定义了用户在其 IT 系统和网络上允许和不允许做的事情。它通常涵盖限制访问不当内容、禁止安装未经授权的软件、处理公司数据的要求以及违反策略的后果。WJEC 考题可能呈现一名员工在工作电脑上下载游戏的场景；答案应提及可接受使用策略，并解释它如何帮助保护组织免受恶意软件、法律责任和生产力损失的影响。
9. Legislation: Computer Misuse Act and Data Protection Act | 立法：《计算机滥用法》和《数据保护法》
The Computer Misuse Act 1990 (UK) makes it illegal to gain unauthorised access to computer material, to access with intent to commit further offences, and to impair the operation of a computer (e.g., by spreading malware or launching a DoS attack). The Data Protection Act 2018 governs the processing of personal data and gives individuals rights over how their information is used. For the WJEC exam, you should be able to cite these laws accurately and explain how they deter cybercrime, as well as their limitations when attackers operate from jurisdictions with weak enforcement.
《1990 年计算机滥用法》规定，未经授权访问计算机材料、意图进一步犯罪而访问计算机，以及损害计算机的运行（例如通过传播恶意软件或发起拒绝服务攻击）均属违法行为。《2018 年数据保护法》规范了个人数据的处理，并赋予个人对其信息使用方式的控制权。对于 WJEC 考试，你应能准确引用这些法律，解释它们如何威慑网络犯罪，以及当攻击者在执法较弱的司法管辖区操作时其局限性。
10. Exam Focus: Applying Cybersecurity Concepts to Scenarios | 考试重点：将网络安全概念应用于案例
WJEC examination papers often feature a short case study – a school network, a small business, or a social media platform – followed by questions that require you to identify threats and recommend countermeasures. Always structure your response: name the threat, describe briefly how it works, then state at least one specific countermeasure with a brief justification. For example, “The company could be targeted by phishing emails. Employees should receive annual cybersecurity awareness training, and the email system should use spam filters.” Marks are awarded for clear and accurate technical language, so practise using keywords like “firewall”, “encryption”, “penetration testing”, and “access rights” in your explanations.
WJEC 试卷通常会包含一个简短的案例研究——一个学校网络、一家小型企业或一个社交媒体平台——随后的问题要求你识别威胁并建议对策。始终按以下结构组织你的回答：指出威胁名称，简要描述其运作方式，然后至少陈述一种具体的对策并简要说明理由。例如，“公司可能成为网络钓鱼电子邮件的目标。员工应接受年度网络安全意识培训，电子邮件系统应使用垃圾邮件过滤器。” 采用清晰准确的技术语言可以获得分数，因此请练习在解释中使用诸如“防火墙”、“加密”、“渗透测试”和“访问权限”等关键词。
Published by TutorHao | Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
屏轩国际教育cambridge primary/secondary checkpoint, cat4, ukiset,ukcat,igcse,alevel,PAT,STEP,MAT, ibdp,ap,ssat,sat,sat2课程辅导，国外大学本科硕士研究生博士课程论文辅导