📚 IGCSE AQA Computer Science: Cybersecurity Key Points | IGCSE AQA 计算机：网络安全考点精讲
Cybersecurity is a vital part of the IGCSE AQA Computer Science syllabus, covering the methods used to protect computer systems, networks, and data from digital attacks. An understanding of threats, vulnerabilities, and prevention techniques enables students to appreciate how technology can be secured in real-world contexts.
网络安全是 IGCSE AQA 计算机科学教学大纲的重要组成部分，涵盖了保护计算机系统、网络和数据免受数字攻击的方法。理解威胁、漏洞和预防技术，能让学生体会如何在现实世界中保障技术安全。
1. The Importance of Cybersecurity | 网络安全的重要性
Cybersecurity involves defending computers, servers, mobile devices, electronic systems, networks, and data from malicious attacks. The growing reliance on digital infrastructure means that breaches can result in financial loss, identity theft, and disruption of critical services.
网络安全涉及保护计算机、服务器、移动设备、电子系统、网络和数据免受恶意攻击。随着对数字基础设施依赖的不断加深，一旦发生漏洞就可能导致经济损失、身份盗窃和关键服务中断。
Individuals and organisations must take proactive measures to maintain confidentiality, integrity, and availability of information – often referred to as the CIA triad. Confidentiality ensures data is only accessible to authorised users; integrity guarantees accuracy and completeness; availability ensures systems are operational when needed.
个人和组织必须采取主动措施来维护信息的机密性、完整性和可用性——通常被称为 CIA 三元组。机密性确保数据只对授权用户开放；完整性保证数据的准确与完整；可用性确保系统在需要时正常运行。
2. Types of Malware | 恶意软件的种类
Malware, short for malicious software, is any program designed to harm or exploit a device, service, or network. Viruses attach themselves to clean files and spread when those files are shared; they often corrupt data or disrupt system functions.
恶意软件是恶意软件的缩写，指任何旨在损害或利用设备、服务或网络的程序。病毒会将自己附加到干净文件上，并在文件被共享时传播；它们通常会破坏数据或干扰系统功能。
Worms are similar but can replicate without attaching to a host program, spreading through networks and consuming bandwidth or overloading systems. A Trojan horse disguises itself as legitimate software to trick users into installing it, giving attackers unauthorised access to the system.
蠕虫与之类似，但无需附着在宿主程序上就能自我复制，通过网络传播，消耗带宽或使系统过载。特洛伊木马伪装成合法软件诱骗用户安装，从而使攻击者获得对系统的未授权访问。
Ransomware encrypts a victim’s files and demands payment for the decryption key, causing immense disruption in both businesses and personal environments. Spyware secretly monitors user activity and collects sensitive information such as passwords and banking details.
勒索软件会加密受害者的文件，并要求支付赎金以获取解密密钥，对企业和个人环境造成极大破坏。间谍软件则秘密监视用户活动并收集密码、银行资料等敏感信息。
3. Social Engineering and Phishing | 社会工程与网络钓鱼
Social engineering exploits human psychology rather than technical vulnerabilities. Attackers manipulate people into divulging confidential information or performing actions that compromise security, often by impersonating trusted entities.
社会工程利用的是人的心理，而非技术漏洞。攻击者通过冒充可信任的实体，操纵人们泄露机密信息或执行危及安全的操作。
Phishing is a common social engineering technique where fraudulent emails, text messages, or websites appear to come from reputable sources. These messages urge recipients to click malicious links or reveal login credentials, leading to identity theft or malware installation.
网络钓鱼是一种常见的社会工程手法，欺诈性的电子邮件、短信或网站看似来自信誉良好的来源。这些信息催促收件人点击恶意链接或暴露登录凭证，从而导致身份盗窃或恶意软件安装。
Spear phishing targets specific individuals or organisations with personalised messages, making them more convincing. Protection includes being sceptical of unsolicited requests, verifying sender identities, and using email filters.
鱼叉式网络钓鱼针对特定个人或组织，发送个性化信息，使其更具说服力。防护措施包括对未经请求的请求保持怀疑、核实发件人身份以及使用电子邮件过滤器。
4. Denial of Service Attacks | 拒绝服务攻击
A Denial of Service (DoS) attack aims to make a network resource or service unavailable to its intended users by overwhelming it with a flood of traffic or requests. This can cause servers to crash, slow down, or become completely inaccessible.
拒绝服务攻击旨在通过大量流量或请求淹盖网络资源或服务，使其无法供合法用户使用。这可能导致服务器崩溃、变慢或完全无法访问。
A Distributed Denial of Service (DDoS) attack uses multiple compromised devices – often part of a botnet – to launch a coordinated attack from many sources simultaneously. DDoS attacks are harder to mitigate because the traffic comes from numerous IP addresses.
分布式拒绝服务攻击使用多个已被侵入的设备——通常是僵尸网络的一部分——同时从多个来源发动协同攻击。DDoS 攻击更难缓解，因为流量来自大量 IP 地址。
Defence strategies include traffic analysis, rate limiting, and using dedicated DDoS protection services that can filter out malicious requests before they reach the target server.
防御策略包括流量分析、速率限制以及使用专门的 DDoS 防护服务，在恶意请求到达目标服务器之前将其过滤掉。
5. Data Interception and Man-in-the-Middle Attacks | 数据拦截与中间人攻击
Data interception occurs when an attacker captures data travelling across a network, often without the knowledge of either sender or receiver. This can be achieved through packet sniffing on unsecured Wi-Fi, network tapping, or malware that monitors traffic.
数据拦截指的是攻击者在发送方和接收方都不知情的情况下，捕获在网络中传输的数据。这可以通过在不安全的 Wi-Fi 上进行数据包嗅探、网络搭接或监控流量的恶意软件来实现。
A man-in-the-middle (MITM) attack goes a step further: the attacker secretly relays and possibly alters the communication between two parties who believe they are directly communicating with each other. This can lead to theft of login details, financial data, or session hijacking.
中间人攻击更进一步：攻击者秘密中继并可能篡改两方之间的通信，而双方都以为自己在直接通信。这可能导致登录信息、金融数据失窃，或会话劫持。
Using encryption protocols such as HTTPS, TLS, and end-to-end encryption significantly reduces the risk of interception by ensuring data is scrambled during transit. Users should avoid entering sensitive information on websites that only use HTTP.
使用 HTTPS、TLS 和端到端加密等协议可显著降低拦截风险，因为这些协议确保了数据在传输过程中被加密。用户应避免在仅使用 HTTP 的网站上输入敏感信息。
6. SQL Injection | SQL 注入
SQL injection is a code injection technique that exploits vulnerabilities in a website’s database layer. Attackers insert malicious SQL statements into an entry field, such as a login box, causing the database to execute unintended commands.
SQL 注入是一种代码注入技术，利用网站数据库层的漏洞。攻击者在登录框等输入字段中插入恶意 SQL 语句，使数据库执行意外的命令。
If successful, the attacker may retrieve, modify, or delete large amounts of data, bypass authentication, or even take control of the database server. This can have devastating consequences for organisations that store sensitive customer information.
一旦成功，攻击者可能检索、修改或删除大量数据、绕过身份验证，甚至控制数据库服务器。这对存储敏感客户信息的组织可能带来灾难性后果。
Defending against SQL injection requires input validation, use of parameterised queries, and prepared statements that separate data from code. Web developers must never trust user input and should sanitise all data received from client side.
防御 SQL 注入需要对输入进行验证、使用参数化查询和预编译语句，将数据与代码分离。Web 开发人员绝不能信任用户输入，并且应对所有从客户端接收到的数据进行清理。
7. Firewalls and Proxy Servers | 防火墙与代理服务器
A firewall is a security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. It acts as a barrier between a trusted internal network and untrusted external networks, such as the Internet.
防火墙是一种安全系统，根据预设的安全规则监控和控制进出网络的流量。它在受信任的内部网络和外部不可信网络（如互联网）之间充当屏障。
Firewalls can be hardware appliances or software applications. They inspect data packets and either allow or block them based on IP addresses, ports, or protocols. This prevents unauthorised access and reduces exposure to attacks.
防火墙可以是硬件设备或软件应用程序。它们检查数据包，并根据 IP 地址、端口或协议决定允许或阻止。这能防止未授权访问并减少暴露于攻击的风险。
A proxy server acts as an intermediary between a user’s device and the Internet. It forwards requests on behalf of the user, hiding the user’s real IP address, and can also cache content, filter web traffic, and enforce usage policies.
代理服务器在用户设备和互联网之间充当中介。它代表用户转发请求，隐藏用户的真实 IP 地址，还可以缓存内容、过滤网络流量并执行使用策略。
8. Encryption and Secure Communication | 加密与安全通信
Encryption converts plain text into ciphertext using algorithms and keys, making it unreadable to anyone who does not possess the appropriate decryption key. Symmetric encryption uses the same key for both encryption and decryption, providing speed but requiring secure key exchange.
加密使用算法和密钥将明文转换为密文，使得没有相应解密密钥的人无法阅读。对称加密使用相同的密钥进行加密和解密，速度较快，但需要安全的密钥交换。
Asymmetric encryption employs a pair of keys: a public key for encryption and a private key for decryption. This eliminates the need to share a secret key openly and forms the basis of secure protocols such as TLS.
非对称加密使用一对密钥：公钥用于加密，私钥用于解密。这避免了公开共享秘密密钥的需要，并构成了 TLS 等安全协议的基础。
TLS (Transport Layer Security) and its predecessor SSL provide encrypted communication over a computer network. Websites using HTTPS implement TLS to protect data integrity and confidentiality between the browser and server. The padlock icon in the browser address bar indicates an active TLS session.
TLS（传输层安全协议）及其前身 SSL 在计算机网络上提供加密通信。使用 HTTPS 的网站实施 TLS 以保护浏览器与服务器之间的数据完整性和机密性。浏览器地址栏中的挂锁图标表明正在使用 TLS 会话。
9. Authentication Methods | 身份验证方法
Authentication verifies that a user or system is who they claim to be. The simplest method is password-based authentication, where a secret string is matched against a stored hash. However, poor password practices such as using ‘password123’ or reusing passwords weaken security.
身份验证用于核实用户或系统的真伪。最简单的方法是基于密码的验证，即将一个秘密字符串与存储的哈希值进行比对。然而，诸如使用 ‘password123’ 或重复使用密码等不良习惯会削弱安全性。
Strong password policies mandate complexity (uppercase, lowercase, digits, symbols), minimum length, and regular changes. Biometric authentication uses unique physical characteristics – fingerprints, retina scans, facial recognition – that are difficult to replicate or steal.
强密码策略要求密码具备复杂性（大写字母、小写字母、数字、符号）、最小长度并定期更换。生物识别认证利用指纹、视网膜扫描、面部识别等独特的生理特征，这些特征难以复制或窃取。
Two-factor authentication (2FA) adds an extra layer of security by requiring two independent pieces of evidence: something you know (password), something you have (a phone or hardware token), or something you are (biometric). Even if one factor is compromised, an attacker cannot gain access without the second factor.
双因素认证 (2FA) 通过要求两种独立的证据来增加额外的安全层：你知道的东西（密码），你拥有的东西（手机或硬件令牌），或者你的本身（生物特征）。即使一个因素被泄露，攻击者也因缺少第二个因素而无法获取访问权。
10. Network Policies and Data Protection Laws | 网络策略与数据保护法
Organisations implement network security policies to define acceptable use of IT resources, specify access rights, and outline consequences for violating rules. These policies help foster a security-conscious culture and reduce the risk of internal threats.
组织通过实施网络安全策略来定义 IT 资源的可接受使用方式、明确访问权限并概述违规的后果。这些策略有助于培养注重安全的文化，并降低内部威胁的风险。
Data protection legislation, such as the GDPR in Europe, governs how personal data must be collected, stored, processed, and shared. It grants individuals rights over their data, including the right to access, correct, and delete information held about them.
数据保护法律，例如欧洲的 GDPR，规范了个人数据的收集、存储、处理和共享方式。它赋予个人对其数据的权利，包括访问、更正和删除有关自己的信息的权利。
Under such laws, organisations must obtain clear consent for data usage, report certain breaches within strict timeframes, and appoint data protection officers. Non-compliance can result in substantial fines and reputational damage, making legal compliance an integral part of cybersecurity.
根据此类法律，组织必须获得明确的数据使用同意、在规定时限内报告某些违规事件并任命数据保护官。不合规可能导致巨额罚款和声誉损害，使法律合规成为网络安全不可或缺的一部分。
11. Personal Cybersecurity Best Practices | 个人网络安全最佳实践
Individuals play a crucial role in maintaining cybersecurity. Using strong, unique passwords for each account and storing them in a reputable password manager prevents credential reuse attacks. Regularly updating operating systems, applications, and antivirus software closes known vulnerabilities.
个人在维护网络安全方面起着至关重要的作用。为每个帐户使用强而独特的密码，并将其存储在信誉良好的密码管理器中，可以防止凭证重用攻击。定期更新操作系统、应用程序和防病毒软件可修复已知漏洞。
Being cautious with email attachments and links, avoiding unfamiliar downloads, and disabling macros in documents from unknown sources reduce the risk of malware infections. Regularly backing up important data to an external drive or cloud service ensures recovery in case of ransomware or hardware failure.
谨慎对待电子邮件附件和链接、避免下载不熟悉的文件以及在未知来源的文档中禁用宏，都可以降低恶意软件感染的风险。定期将重要数据备份到外置驱动器或云服务，可确保在遇到勒索软件或硬件故障时能够恢复。
Enabling multi-factor authentication wherever possible, using a VPN on public Wi-Fi, and locking devices with strong PINs or biometrics further strengthen personal defences against common cyber threats.
尽可能启用多因素认证、在公共 Wi-Fi 上使用 VPN、以及使用强 PIN 码或生物识别锁定设备，都能进一步增强个人针对常见网络威胁的防御能力。
Published by TutorHao | Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
屏轩国际教育cambridge primary/secondary checkpoint, cat4, ukiset,ukcat,igcse,alevel,PAT,STEP,MAT, ibdp,ap,ssat,sat,sat2课程辅导，国外大学本科硕士研究生博士课程论文辅导