📚 Cybersecurity Essentials for IGCSE CIE Computer Science | IGCSE CIE 计算机：网络安全考点精讲
Cyber security is the practice of defending computers, servers, mobile devices, electronic systems, networks and data from malicious attacks, damage or unauthorised access. In the IGCSE CIE Computer Science syllabus, you need to understand the main threats that put digital systems at risk and the methods used to keep data safe. This article walks you through the key concepts, from malware and phishing to firewalls, encryption and backup strategies, equipping you with the knowledge to answer exam questions confidently.
网络安全是保护计算机、服务器、移动设备、电子系统、网络和数据免受恶意攻击、损坏或未经授权访问的实践。在 IGCSE CIE 计算机科学课程中，你需要了解威胁数字系统的主要风险以及保护数据安全的方法。本文将带你梳理从恶意软件、网络钓鱼到防火墙、加密和备份策略等关键概念，帮助你自信应对考试。
1. What Is Cyber Security? | 什么是网络安全？
Cyber security focuses on three main objectives: confidentiality (ensuring data is only accessible to authorised users), integrity (data remains accurate and unaltered) and availability (data and services are accessible when needed). Threats can come from individuals, organised criminals or even nation-states, and they can target software vulnerabilities or human psychology.
网络安全主要关注三个目标：机密性（确保数据仅对授权用户开放）、完整性（数据保持准确且未被篡改）和可用性（数据和服务器在需要时可访问）。威胁可能来自个人、有组织的犯罪分子甚至国家行为体，攻击目标可以是软件漏洞，也可以是人的心理弱点。
For the IGCSE exam, you should be able to define cyber security and explain why individuals and organisations need to protect data. Reasons include preventing identity theft, safeguarding financial details, protecting intellectual property and maintaining trust in digital services.
在IGCSE考试中，你需要定义网络安全，并解释个人和组织为何需要保护数据。原因包括防止身份盗用、保护财务信息、保护知识产权以及维护人们对数字服务的信任。
2. Malware: Viruses, Worms, Trojans and Ransomware | 恶意软件：病毒、蠕虫、特洛伊木马和勒索软件
Malware is short for ‘malicious software’. It is designed to disrupt, damage or gain unauthorised access to computer systems. A virus attaches itself to clean files and spreads when a user opens them; a worm can replicate itself and spread across networks without human interaction. A Trojan horse disguises itself as legitimate software but carries a hidden harmful payload.
恶意软件是“恶意软件”(malicious software)的缩写，旨在破坏、损害或未经授权进入计算机系统。病毒附着在正常文件上，用户打开文件时传播；蠕虫可以自我复制并通过网络传播，无需人为操作；特洛伊木马伪装成合法软件，但携带隐藏的有害载荷。
Ransomware is a type of malware that encrypts the victim’s files or locks the device, demanding payment to restore access. Spyware covertly monitors user activity, stealing passwords or credit card details. Anti-malware software can detect and remove these threats, but regular updates are needed to recognise new variants.
勒索软件是一种恶意软件，会加密受害者的文件或锁定设备，要求支付赎金才能恢复访问。间谍软件暗中监视用户活动，窃取密码或信用卡信息。反恶意软件可以检测并清除这些威胁，但需要定期更新以识别新变种。
3. Social Engineering and Phishing | 社交工程和网络钓鱼
Social engineering exploits human behaviour rather than technical weaknesses. Attackers manipulate people into revealing confidential information or performing actions that compromise security. Phishing is a common social engineering technique: attackers send emails or messages that appear to come from trusted sources to trick recipients into clicking malicious links or providing personal data.
社交工程利用的是人的行为，而非技术漏洞。攻击者会诱骗人们透露机密信息或执行危及安全的操作。网络钓鱼是一种常见的社交工程技术：攻击者发送看似来自可信来源的邮件或消息，诱使收件人点击恶意链接或提供个人数据。
Spear phishing targets specific individuals or organisations, often using personal details to appear more convincing. Smishing (SMS phishing) and vishing (voice phishing) use text messages or phone calls to deceive victims. To avoid falling victim, always check the sender’s address, look for spelling errors and never give away sensitive information without verifying the request through another channel.
鱼叉式钓鱼针对特定个人或组织，常利用个人细节以显得更加可信。#
短信钓鱼（smishing）和语音钓鱼（vishing）利用短信或电话欺骗受害者。为避免上当，务必检查发件人地址，留意拼写错误，绝不在未通过其他渠道核实的情况下泄露敏感信息。
4. Brute-Force Attacks and Data Interception | 暴力攻击与数据拦截
A brute-force attack attempts to crack passwords by systematically trying every possible combination of characters until the correct one is found. Using long, complex passwords and limiting login attempts can defend against such attacks. Data interception occurs when an attacker secretly captures data travelling across a network, often through packet sniffers or unsecured Wi-Fi.
暴力攻击通过系统地尝试所有可能的字符组合来破解密码，直到找到正确密码。使用长且复杂的密码并限制登录尝试次数可以防御此类攻击。数据拦截指攻击者暗中捕获正在网络间传输的数据，通常通过数据包嗅探器或不安全的 Wi-Fi 实现。
To protect data in transit, encryption scrambles the information so that only the intended recipient with the correct key can read it. HTTPS, VPNs and WPA3 Wi-Fi security all use encryption to prevent eavesdropping.
为保护传输中的数据，加密会对信息进行打乱，只有拥有正确密钥的预期接收者才能读取。HTTPS、VPN 和 WPA3 Wi-Fi 安全机制都使用加密来防止窃听。
5. Denial of Service (DoS) and Distributed DoS Attacks | 拒绝服务攻击与分布式拒绝服务攻击
A Denial of Service (DoS) attack overwhelms a server or network with more traffic than it can handle, making the service unavailable to legitimate users. A Distributed Denial of Service (DDoS) attack uses multiple compromised devices (a botnet) to launch the assault, making it much harder to stop.
拒绝服务攻击通过向服务器或网络发送超出其处理能力的流量，使其不可用于合法用户。分布式拒绝服务攻击利用多个受感染的设备（僵尸网络）发动攻击，使其更难阻止。
These attacks can target websites, online games or any online service. Organisations can mitigate the risk by using firewalls that filter traffic, deploying intrusion prevention systems and maintaining extra bandwidth capacity. Exam questions often ask you to describe the difference between DoS and DDoS and to suggest preventive measures.
这些攻击可针对网站、在线游戏或任何在线服务。机构可以通过使用可过滤流量的防火墙、部署入侵防御系统以及保留额外的带宽容量来降低风险。考试题常要求你描述 DoS 与 DDoS 的区别，并提出预防措施。
6. Firewalls and Anti-Malware Protection | 防火墙与反恶意软件保护
A firewall monitors and controls incoming and outgoing network traffic based on predetermined security rules. It acts as a barrier between a trusted internal network and untrusted external networks such as the Internet. Firewalls can be hardware devices, software applications or a combination of both.
防火墙根据预设的安全规则监控和控制进出网络流量，起到在可信内部网络与不可信外部网络（如互联网）之间的屏障作用。防火墙可以是硬件设备、软件应用或两者结合。
Anti-malware software scans files and memory for known malicious code patterns (signatures) and suspicious behaviour (heuristics). It should be kept up to date with the latest malware definitions and used alongside firewalls for layered security. For IGCSE, you should also mention automatic software updates, which patch vulnerabilities that malware often exploits.
反恶意软件会扫描文件和内存，查找已知的恶意代码模式（特征码）和可疑行为（启发式检测）。应保持其拥有最新恶意软件定义，并与防火墙一同使用以形成分层安全。在IGCSE考试中，你还应提及自动软件更新，它可以修补恶意软件常利用的漏洞。
7. Authentication: Passwords, Biometrics and Two-Factor | 身份验证：密码、生物识别与双重验证
Authentication is the process of verifying the identity of a user or device before granting access. Common methods include usernames and passwords, but strong passwords should be long, contain a mix of characters and not be reused across accounts. Multi-factor or two-factor authentication (2FA) adds an extra layer of security by requiring a second factor, such as a one-time code sent to a mobile phone or generated by an authenticator app.
身份验证是指在授予访问权限前，验证用户或设备身份的过程。常见方法包括用户名和密码，但强密码应足够长，包含多种字符，且不在多个账户间重复使用。多因素或双重验证(2FA)通过要求第二因素（如发送到手机的一次性验证码或由身份验证应用生成的验证码）增加额外的安全层。
Biometric authentication uses unique physical characteristics such as fingerprints, iris patterns or facial recognition. These are hard to forge but raise privacy concerns. The syllabus expects you to compare methods and discuss their strengths and weaknesses, for example, biometrics offer strong security but cannot be reset if compromised.
生物识别认证利用独特的生理特征，如指纹、虹膜图案或面部识别。这些特征难以伪造，但引发了隐私方面的担忧。考纲要求你比较不同方法并讨论其优缺点，例如，生物识别提供强安全性，但一旦泄露就无法重置。
8. Encryption and SSL/TLS | 加密与 SSL/TLS
Encryption converts plaintext into ciphertext using an algorithm and a key. Symmetric encryption uses the same key for encryption and decryption, while asymmetric encryption uses a public key for encryption and a private key for decryption. HTTPS websites rely on Transport Layer Security (TLS) — formerly Secure Sockets Layer (SSL) — to establish an encrypted connection between browser and server.
加密使用算法和密钥将明文转换为密文。对称加密使用同一密钥进行加解密，而非对称加密则用公钥加密、私钥解密。HTTPS 网站依赖传输层安全协议(TLS)（其前身为安全套接字层 SSL）在浏览器与服务器之间建立加密连接。
When you see a padlock icon in the browser, it indicates that TLS is active, protecting data such as passwords and payment details from eavesdropping. In IGCSE, you need to explain the purpose of encryption and describe how SSL/TLS helps keep online transactions secure.
当你在浏览器中看到挂锁图标时，表示 TLS 已启用，可保护密码和支付信息等数据不被窃听。在IGCSE中，你需要解释加密的目的，并描述 SSL/TLS 如何帮助保障在线交易的安全。
9. VPNs and Proxy Servers | 虚拟专用网络与代理服务器
A Virtual Private Network (VPN) extends a private network across a public network, allowing users to send and receive data as if their devices were directly connected to the private network. VPNs encrypt all traffic between the user and the VPN server, hiding the user’s IP address and protecting data on unsecured Wi-Fi.
虚拟专用网络(VPN)将专用网络扩展到公共网络上，使用户能够发送和接收数据，仿佛其设备直接连接在专用网络中。VPN 加密用户与 VPN 服务器之间的所有流量，隐藏用户 IP 地址并保护在不安全 Wi-Fi 上的数据。
A proxy server acts as an intermediary between a user and the Internet. It can cache web pages to improve speed, filter content and hide the user’s IP address, but it does not necessarily encrypt traffic. For exams, compare VPNs and proxies: a VPN offers stronger privacy and security, while a proxy is often used for bypassing geo-blocks or basic anonymity.
代理服务器充当用户与互联网之间的中介。它可缓存网页以提高速度、过滤内容并隐藏用户 IP 地址，但不一定加密流量。考试中要比较 VPN 和代理：VPN 提供更强的隐私和安全性，而代理通常用于绕过地理封锁或实现基础匿名。
10. Data Integrity, Validation and Verification | 数据完整性、验证与核实
Data integrity means that data is accurate, consistent and reliable over its entire lifecycle. Threats to integrity include human error during data entry, transmission errors and malicious tampering. Maintaining integrity is crucial for business decisions, financial records and safety-critical systems.
数据完整性是指数据在其整个生命周期中保持准确、一致和可靠。完整性的威胁包括数据录入时的人为错误、传输错误以及恶意篡改。维护完整性对于商业决策、财务记录和安全关键系统至关重要。
Validation checks whether input data is reasonable or sensible before it is accepted by the system. Common checks include range check, type check, presence check and check digit. Verification ensures that data has been copied or entered correctly, for example by double entry or visual check. Both help prevent errors that compromise data integrity.
验证（validation）是检查输入数据在被系统接受之前是否合理或符合要求。常见检查包括范围检查、类型检查、存在性检查和校验位。核实（verification）则确保数据被正确复制或输入，例如通过双重输入或目视检查。两者都有助于防止损害数据完整性的错误。
11. Backup Strategies | 备份策略
Backing up data means making copies that can be restored in case of hardware failure, cyber-attack or accidental deletion. A full backup copies all data, providing a complete restore point but taking the most time and storage. Incremental backup only copies files changed since the last backup (of any type), saving time and space but making restoration more complex.
备份数据是指制作可在硬件故障、网络攻击或意外删除时恢复的副本。全备份拷贝所有数据，提供完整的恢复点，但耗时最多、占用存储空间最大。增量备份只复制自上次备份（任何类型）以来更改过的文件，节省时间和空间，但恢复时更为复杂。
Differential backup copies all files changed since the last full backup, offering a middle ground between speed and ease of restoration. Off-site backups, whether physical storage in another location or cloud-based, protect against disasters like fire or flood. The IGCSE syllabus expects you to explain each backup type and justify off-site storage.
差异备份复制自上次全备份以来所有更改过的文件，在速度和恢复便利性之间取得了平衡。异地备份，无论是存放在另一地点的物理介质还是云备份，都能防范火灾或洪水等灾害。IGCSE 考纲要求你解释每种备份类型并说明异地存储的合理性。
12. Ethical, Legal and Safe Practices | 道德、法律与安全实践
Cyber security also involves behaving responsibly. Unauthorised access, data theft and spreading malware are illegal under laws such as the Computer Misuse Act (UK) and similar legislation worldwide. Ethical hacking (penetration testing) is conducted with permission to identify weaknesses before criminals can exploit them.
网络安全也涉及负责任的行为。未经授权访问、数据盗窃和传播恶意软件在《计算机滥用法》(Computer Misuse Act)（英国）及世界各地类似法律下均属非法。道德黑客行为（渗透测试）是在获得许可的前提下识别弱点，以防犯罪分子利用。
Users should adopt safe habits: regularly update software, back up important data, use strong passwords, enable 2FA, log out of shared devices and be sceptical of unsolicited emails. Organisations must have clear security policies and provide training so that all staff understand their role in maintaining cyber security.
用户应养成安全习惯：定期更新软件、备份重要数据、使用强密码、启用双重验证、在使用共享设备后注销，并对未经请求的邮件保持警惕。组织应制定明确的安全策略并提供培训，使所有员工了解自己在维护网络安全中的角色。
Published by TutorHao | Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
屏轩国际教育cambridge primary/secondary checkpoint, cat4, ukiset,ukcat,igcse,alevel,PAT,STEP,MAT, ibdp,ap,ssat,sat,sat2课程辅导，国外大学本科硕士研究生博士课程论文辅导