📚 GCSE Computer Science: Cybersecurity Key Points | GCSE 计算机：网络安全考点精讲
Cybersecurity is a vital topic in GCSE Computer Science, focusing on protecting systems, networks, and data from digital attacks. This article revisits key exam points, from common threats like malware and phishing to defence strategies such as encryption and firewalls. Understanding these concepts not only prepares you for exam questions but also builds a strong foundation for the digital world.
网络安全是 GCSE 计算机科学的重要主题，重点关注保护系统、网络和数据免受数字攻击。本文重温关键考点，从恶意软件和网络钓鱼等常见威胁，到加密和防火墙等防御策略。理解这些概念不仅能备考，还能为数字世界打下坚实基础。
1. Types of Cyber Threats | 网络威胁的类型
A cyber threat is any malicious act that attempts to damage, steal, or disrupt digital life. Threats can be divided into two broad categories: technical attacks, which exploit software or hardware vulnerabilities, and social engineering attacks, which manipulate human psychology.
网络威胁是任何试图破坏、窃取或扰乱数字生活的恶意行为。威胁可分为两大类：技术攻击，利用软件或硬件漏洞；和社会工程攻击，操纵人类心理。
Common technical threats include malware, SQL injection, brute-force attacks, and denial-of-service attacks. Social engineering includes phishing, baiting, and shoulder surfing. GCSE exam boards expect you to recognise and describe these threats clearly.
常见的技术威胁包括恶意软件、SQL 注入、暴力攻击和拒绝服务攻击。社会工程包括网络钓鱼、诱饵和肩窥。GCSE 考试局要求你清晰地识别和描述这些威胁。
2. Malware: Viruses and Worms | 恶意软件：病毒与蠕虫
Malware is short for malicious software. A virus attaches itself to a legitimate program or file and spreads when that infected file is shared. It requires human action, such as opening an email attachment, to activate.
恶意软件是恶意软件的缩写。病毒附着在合法程序或文件上，当该受感染文件被共享时传播。它需要人类操作（如打开电子邮件附件）才能激活。
In contrast, a worm can self-replicate without any user interaction. Worms exploit network vulnerabilities to spread rapidly across connected devices, often causing network slowdowns or consuming bandwidth.
相比之下，蠕虫无需任何用户交互即可自我复制。蠕虫利用网络漏洞在连接的设备间快速传播，常常导致网络减速或消耗带宽。
Both viruses and worms can corrupt or delete files, steal sensitive data, and create backdoors for further attacks. Understanding the difference in their spread mechanisms is a common exam question.
病毒和蠕虫都可以损坏或删除文件、窃取敏感数据，以及创建后门供进一步攻击。理解它们传播机制的区别是常见考题。
3. Trojans, Spyware, and Ransomware | 特洛伊木马、间谍软件与勒索软件
A Trojan horse disguises itself as useful software but carries hidden malicious functions. Unlike viruses and worms, Trojans do not replicate; they rely on users to install them, often by trickery.
特洛伊木马伪装成有用软件，但包含隐藏的恶意功能。与病毒和蠕虫不同，木马不自我复制；它们依靠用户通过欺骗来安装。
Spyware secretly monitors user activity and collects information such as login credentials, browsing habits, or keystrokes. It typically runs in the background, unnoticed, and transmits data to a third party.
间谍软件秘密监视用户活动，收集登录凭证、浏览习惯或击键记录。它通常在后台运行，不易察觉，并将数据传输给第三方。
Ransomware encrypts the victim's files and demands a ransom for the decryption key. Modern ransomware can spread across networks and target organisations, making regular backups essential.
勒索软件加密受害者文件，并索要赎金以换取解密密钥。现代勒索软件可跨网络传播并瞄准组织，因此定期备份至关重要。
4. Social Engineering: Phishing and Shoulder Surfing | 社会工程：网络钓鱼与肩窥
Social engineering manipulates individuals into divulging confidential information. Phishing is the most common form, using deceptive emails or messages that appear to come from trusted sources like banks or service providers.
社会工程操纵个人透露机密信息。网络钓鱼是最常见的形式，使用欺骗性的电子邮件或消息，看似来自银行或服务提供商等可信来源。
These messages often contain links to fake websites that harvest usernames and passwords. Variants include spear phishing (targeted at specific individuals) and vishing (voice phishing over the phone).
这些消息通常包含指向虚假网站的链接，收集用户名和密码。变体包括鱼叉式网络钓鱼（针对特定个人）和语音钓鱼（通过电话）。
Shoulder surfing is a low-tech social engineering attack where an attacker simply watches the victim's screen or keyboard in a public place to capture PINs or passwords. Shielding the keypad and being aware of surroundings are simple countermeasures.
肩窥是一种低技术的社会工程攻击，攻击者在公共场所直接窥视受害者的屏幕或键盘，以捕获 PIN 码或密码。遮挡键盘并注意周围环境是简单的对策。
5. Brute-Force Attacks and DDoS | 暴力攻击与分布式拒绝服务攻击
A brute-force attack systematically tries every possible combination of passwords or encryption keys until the correct one is found. The success depends on password strength and computational power. Rate limiting and account lockout policies are effective defences.
暴力攻击系统地尝试所有可能的密码或加密密钥组合，直到找到正确的一个。成功与否取决于密码强度和计算能力。速率限制和账户锁定策略是有效的防御措施。
A Distributed Denial-of-Service (DDoS) attack floods a server or network with an overwhelming amount of traffic, making it unavailable to legitimate users. Attackers often use botnets, which are networks of compromised devices, to generate the traffic.
分布式拒绝服务攻击用大量流量淹没服务器或网络，使其无法为合法用户提供服务。攻击者常使用僵尸网络（受感染设备组成的网络）生成流量。
DDoS attacks do not steal data but can cause significant financial and reputational damage. Mitigation techniques include traffic filtering and load balancing.
DDoS 攻击不窃取数据，但会造成重大财务和声誉损失。缓解技术包括流量过滤和负载均衡。
6. SQL Injection and Man-in-the-Middle Attacks | SQL 注入与中间人攻击
SQL injection occurs when an attacker inserts malicious SQL code into a data entry field on a website. If the input is not properly validated, the database executes the code, potentially revealing, altering, or deleting data.
SQL 注入发生在攻击者将恶意 SQL 代码插入网站的数据输入字段时。如果输入未正确验证，数据库会执行该代码，可能泄露、修改或删除数据。
against SQL injection. GCSE exams often expect you to explain how a simple injection like ' OR '1'='1' can bypass login screens.
参数化查询和输入清理是防御 SQL 注入的主要手段。GCSE 考试通常期望你解释简单的注入语句，如 ' OR '1'='1' 如何绕过登录屏幕。
A man-in-the-middle (MitM) attack intercepts communication between two parties to eavesdrop or alter messages. Wi-Fi eavesdropping on unencrypted public hotspots is a classic example. Encryption protocols like TLS help prevent MitM.
中间人攻击拦截双方通信，以窃听或篡改消息。在未加密的公共热点上进行 Wi-Fi 窃听是一个典型例子。TLS 等加密协议有助于防止中间人攻击。
7. Firewalls and Anti-Malware | 防火墙与反恶意软件
A firewall monitors incoming and outgoing network traffic based on predetermined security rules. It acts as a barrier between a trusted internal network and untrusted external networks, blocking unauthorised access.
防火墙根据预设的安全规则监控传入和传出的网络流量。它充当可信内部网络与不可信外部网络之间的屏障，阻止未授权访问。
Firewalls can be hardware or software-based. They examine data packets and filter them according to IP addresses, port numbers, and protocols. They are essential for preventing intrusions but cannot stop all attacks.
防火墙可以是硬件或软件形式。它们检查数据包，并根据 IP 地址、端口号和协议进行过滤。它们对于防止入侵至关重要，但不能阻止所有攻击。
Anti-malware software detects, quarantines, and removes viruses, worms, Trojans, and spyware. It relies on signature-based detection and heuristic analysis. Keeping anti-malware definitions up to date is critical to recognise the latest threats.
反恶意软件检测、隔离并删除病毒、蠕虫、木马和间谍软件。它依赖于基于特征码的检测和启发式分析。保持反恶意软件定义最新对于识别最新威胁至关重要。
8. Encryption Basics | 加密基础
Encryption converts plaintext into ciphertext, making data unreadable to unauthorised parties. Symmetric encryption uses a single key for both encryption and decryption; this key must be shared securely, which can be a challenge.
加密将明文转换为密文，使数据对未授权方不可读。对称加密使用单一密钥进行加密和解密；该密钥必须安全共享，这可能是一个挑战。
Asymmetric encryption uses a pair of keys: a public key for encryption and a private key for decryption. Only the private key can decrypt messages encrypted with the corresponding public key. This solves the key distribution problem.
非对称加密使用一对密钥：公钥用于加密，私钥用于解密。只有私钥能解密用对应公钥加密的消息。这解决了密钥分发问题。
Transport Layer Security (TLS) and its predecessor SSL use asymmetric encryption to establish a secure session and then symmetric encryption for data transfer. The padlock icon in a browser indicates an active TLS connection. GCSE exams may ask about HTTPS and how encryption protects online transactions.
传输层安全协议及其前身 SSL 使用非对称加密建立安全会话，然后用对称加密传输数据。浏览器中的挂锁图标表示活动的 TLS 连接。GCSE 考试可能会问及 HTTPS 以及加密如何保护在线交易。
9. Authentication: Passwords and Biometrics | 身份验证：密码与生物识别
Strong passwords are a fundamental defence. A strong password is long, includes a mix of uppercase and lowercase letters, digits, and symbols, and avoids dictionary words or personal information. Password managers can help users generate and store complex passwords.
强密码是基本防御。强密码长度长，包含大小写字母、数字和符号的混合，避免字典词或个人信息。密码管理器可以帮助用户生成和存储复杂密码。
Multi-factor authentication (MFA) adds extra layers of security. It requires at least two of the following: something you know (password), something you have (a phone or token), and something you are (biometric). MFA significantly reduces the risk of unauthorised access.
多因素认证增加了额外的安全层。它至少要求以下两项：你所知道的（密码）、你拥有的（手机或令牌）和你所是的（生物识别）。多因素认证显著降低未授权访问的风险。
Biometric authentication uses unique physical characteristics such as fingerprints, iris patterns, or facial recognition. Biometrics are difficult to forge but raise privacy concerns because biometric data cannot be changed if compromised.
生物识别认证使用独特的身体特征，如指纹、虹膜模式或面部识别。生物特征难以伪造，但引发了隐私担忧，因为生物数据一旦泄露就无法更改。
10. Software Updates, Backups, and Recovery | 软件更新、备份与恢复
Regular software updates and patches fix security vulnerabilities that attackers could exploit. Operating systems, web browsers, and anti-malware tools should be kept current. Automatic updates help ensure timely protection.
定期的软件更新和补丁可修复攻击者可能利用的安全漏洞。操作系统、网络浏览器和反恶意软件工具应保持最新。自动更新有助于确保及时保护。
Backups are copies of data stored separately so that they can be restored after a ransomware attack, hardware failure, or accidental deletion. A robust backup strategy follows the 3-2-1 rule: three copies of data, on two different media, with one copy off-site.
备份是单独存储的数据副本，以便在勒索软件攻击、硬件故障或意外删除后恢复。稳健的备份策略遵循 3-2-1 规则：三份数据副本，存储在两种不同介质上，一份异地存放。
Disaster recovery planning outlines how an organisation will restore IT services after a major incident. Regular testing of backups and recovery procedures is essential to ensure they work when needed.
灾难恢复规划概述了组织在重大事件后如何恢复 IT 服务。定期测试备份和恢复程序对于确保其在需要时能正常工作至关重要。
11. Legislation and Acceptable Use Policies | 法律与可接受使用政策
The Computer Misuse Act 1990 makes unauthorised access to computer material, unauthorised access with intent to commit further offences, and unauthorised modification of data illegal in the UK. GCSE questions often link these offences to scenarios like hacking or spreading viruses.
《1990 年计算机滥用法》将在英国未经授权访问计算机资料、意图进一步犯罪而未经授权访问以及未经授权修改数据定为非法。GCSE 经常将这类犯罪与黑客攻击或传播病毒等场景联系起来。
Data protection legislation, such as UK GDPR, regulates how organisations collect, store, and process personal data. It requires data to be kept secure, used fairly, and not kept longer than necessary. Breaches can lead to heavy fines.
数据保护立法，如英国 GDPR，规范了组织如何收集、存储和处理个人数据。它要求数据安全保存、公平使用，且保存时间不超过必要期限。违规可导致巨额罚款。
An Acceptable Use Policy (AUP) is a set of rules that users must agree to before accessing a network or service. It typically covers password confidentiality, bans on sharing copyrighted material, and responsible use of social media. AUPs help maintain security and legal compliance.
可接受使用政策是用户在访问网络或服务前必须同意的一套规则。它通常涵盖密码保密、禁止共享版权材料以及负责任地使用社交媒体。AUP 有助于维护安全和法律合规。
Published by TutorHao | Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
或截图后用「扫一扫 → 相册」选择本图