📚 Year 8 OCR Computer Science: Full Curriculum Breakdown | Year 8 OCR 计算机：课程大纲全面解析
The Year 8 OCR Computer Science curriculum is designed to build upon the foundational digital literacy skills students acquire in Year 7, while introducing more abstract concepts in computational thinking, programming, and the inner workings of computer systems. This stage marks a critical transition where learners move from being passive users of technology to becoming active creators and problem-solvers. The OCR pathway at Key Stage 3 aligns directly with the GCSE Computer Science specification (J277), ensuring that students develop the core competencies required for further study. In this comprehensive breakdown, we explore every major strand of the Year 8 syllabus, including systems architecture, data representation, algorithm design, text-based programming, networking fundamentals, cybersecurity awareness, and the ethical implications of computing technology. Whether you are a student aiming to consolidate your knowledge or a parent seeking clarity on what your child will learn, this guide provides a structured walkthrough of the entire Year 8 OCR journey.
Year 8 OCR 计算机课程旨在巩固学生在七年级所获得的数字素养基础技能，同时引入更具抽象性的计算思维、编程以及计算机系统内部运作的概念。这个阶段标志着一个关键的转折点：学习者从技术的被动使用者转变为主动的创造者和问题解决者。OCR 在关键阶段三（KS3）的课程路径与 GCSE 计算机科学规范（J277）直接对接，确保学生能够发展进一步学习所需的核心能力。在本篇全面解析中，我们将逐一探讨八年级课程大纲的每一个主要板块，包括系统架构、数据表示、算法设计、文本化编程、网络基础、网络安全意识以及计算技术的伦理影响。无论你是希望巩固知识的学生，还是想明确孩子学习内容的家长，这篇指南都将为你提供一次贯穿整个 Year 8 OCR 学习旅程的结构化导览。
1. Computer Systems Architecture | 计算机系统架构
At the heart of Year 8 OCR Computing lies an exploration of the fundamental architecture that powers every digital device. Students begin by examining the Von Neumann architecture, understanding how the Central Processing Unit (CPU), memory, and input/output components interact to execute instructions. The role of the Control Unit (CU) in managing the Fetch-Decode-Execute (FDE) cycle is a central concept, as is the Arithmetic Logic Unit (ALU) which performs calculations and logical operations. Pupils learn to identify the key registers involved: the Program Counter (PC) holds the address of the next instruction, the Memory Address Register (MAR) stores the location of data in memory, the Memory Data Register (MDR) holds the actual data being transferred, and the Accumulator (ACC) temporarily stores results from the ALU. Understanding how these components work together gives students a mental model of what is physically happening inside a computer when a program runs. The concept of clock speed is introduced, measured in Hertz (Hz), where 3.5 GHz indicates 3.5 billion FDE cycles per second. Students also explore how cache memory — small but extremely fast memory located close to the CPU — improves performance by storing frequently accessed instructions. The syllabus distinguishes between different levels of cache (L1, L2, L3) and explains why L1 is the fastest but smallest, while L3 is larger but slower. Embedded systems are another focal point: dedicated computer systems within larger devices such as washing machines, microwave ovens, and automotive engine control units. Students contrast general-purpose computers with these specialised, resource-constrained systems that typically run a single program stored in ROM.
Year 8 OCR 计算机课程的核心在于探索驱动每个数字设备的基本架构。学生首先研究冯·诺依曼架构，理解中央处理器（CPU）、存储器以及输入/输出组件如何相互作用以执行指令。控制单元（CU）在管理“取指-解码-执行”（FDE）周期中的作用是一个核心概念，而算术逻辑单元（ALU）则执行计算和逻辑运算。学生需要学会识别所涉及的关键寄存器：程序计数器（PC）保存下一条指令的地址，存储器地址寄存器（MAR）存储数据在内存中的位置，存储器数据寄存器（MDR）保存正在传输的实际数据，累加器（ACC）则临时存储来自 ALU 的结果。理解这些组件如何协同工作，使学生能够建立关于程序运行时计算机内部物理过程的思维模型。主频的概念被引入，以赫兹（Hz）为单位进行测量，例如 3.5GHz 表示每秒运行 35 亿个 FDE 周期。学生还将探讨缓存（一种位于 CPU 附近的小容量超高速内存）如何通过存储频繁访问的指令来提高性能。课程大纲区分了不同级别的缓存（L1、L2、L3），并解释了为什么 L1 速度最快但容量最小，而 L3 容量较大但速度较慢。嵌入式系统是另一个重点：它们是位于大型设备（如洗衣机、微波炉和汽车发动机控制单元）内部的专用计算机系统。学生需要将通用计算机与这些通常在 ROM 中运行单一程序的资源受限型专用系统进行对比。
2. Data Representation: Binary, Hex, and Beyond | 数据表示：二进制、十六进制及其他
Students consolidate their understanding that all data stored and processed by a computer — text, images, sound, and video — sents a power of 2. A typical exercise involves converting an 8-bit binary number such as 10110011 into its decimal equivalent: (1×2⁷) + (0×2⁶) + (1×2⁵) + (1×2⁴) + (0×2³) + (0×2²) + (1×2¹) + (1×2⁰) = 128 + 0 + 32 + 16 + 0 + 0 + 2 + 1 = 179. Students also learn binary addition and the concept of overflow errors — nd for binary, using the digits 0-9 and letters A-F. A byte (8 bits) can be elegantly represented by just two hex digits; for example, 10111100 in binary splits into two nibbles 1011 (B in hex) and 1100 (C in hex), giving BC. Students practise conversions between binary, denary, and hexadecimal, recognising that hex is widely used in MAC addresses, HTML colour codes (such as # rs, covering English letters, digits, and basic punctuation. Unicode, with its UTF-8 and UTF-16 variants, extends this to cover virtually every writing system on the planet, using up to 4 bytes per character. Students examine how the need for international communication drove the development of Unicode beyond the limitations of ASCII. In image representation, the syllabus covers how bitmap images are composed of pixels, each assigned a binary colour value. Colour depth — the number of bits used per pixel — ion colours. Resolution, measured in pixels or dots per inch (DPI), is linked to image quality and file size. Metadata such as width, height, and colour depth are explained as headers that the computer reads before rendering the image. Sound representation is decoded through the process of sampling: an analogue sound wave is measured at discrete intervals, with the sample rate (measured in Hz or kHz) and bit depth determining the accuracy and file size. The Nyquist theorem is mentioned at a conceptual level — sample rate must be at least twice the highest frequency to accurately reproduce the sound — alongside common audio standards like CD quality (44.1 kHz, 16-bit stereo).
数据表示构成了 Year 8 OCR 课程大纲的数学基础。学生需要巩固“计算机存储和处理的所有数据——文本、图像、声音和视频——最终都必须以二进制数字（比特）形式表示”这一理解。二进制数制（基数为2）仅使用两个符号（0 和 1），每个位置代表一个 2 的幂。典型的练习包括将 8 位二进制数（如 10110011）转换为十进制等值： 2⁵) + (1×2⁴) + (0×2³) + (0×2²) + (1×2¹) + (1×2⁰) = 128 + 0 + 32 + 16 + 0 + 0 + 2 + 1 = 179。学生还将学习二进制加法以及溢出错误的概念——即加法结果超过 8 位最大值 255 时发生的情况。十六进制（基数为 16）作为一种更人性化的二进制简写被引入，使用数字 0-9 和字母 A-F。一个字节（8 位）可以优雅地用两个十六进制数字表示；例如，二进制中的 10111100 可分割为两个半字节：1011（十六进制为 B）和 1100（十六进制为 C），即 BC。学生需练习二进制、十进制和十六进制之间的转换，并认识到十六进制广泛用于 MAC 地址、HTML 颜色代码（如 #FF5733）和汇编语言中。字符编码通过 ASCII 和 Unicode 的视角被重新审视。ASCII 使用 7 比特来表示 128 个字符，涵盖英文字母、数字和基本标点符号。Unicode（含 UTF-8 和 UTF-16 变体）将其扩展为几乎涵盖地球上所有书写系统，每个字符最多使用 4 个字节。学生将研究国际交流的需求如何推动 Unicode 超越了 ASCII 的局限。在图像表示方面，课程大纲涵盖位图图像是如何由像素组成的，每个像素都被赋予一个二进制的颜色值。颜色深度——每个像素所用的比特数——决定了调色板的大小：1 比特产生 2 种颜色，8 比特给出 256 种，而 24 比特（3 个字节，分别对应红色、绿色和蓝色）则能产生超过 1670 万种颜色。分辨率（以像素或每英寸点数 DPI 为单位）与图像质量和文件大小相关联。元数据（如宽度、高度和颜色深度）被解释为计算机在渲染图像前读取的文件头。声音表示则通过采样过程进行解码：一个模拟声波以离散的时间间隔被测量，采样率（以 Hz 或 kHz 为单位）和比特深度共同决定了精度和文件大小。奈奎斯特定理在概念层面被提及——采样率必须至少是最高频率的两倍才能准确重现声音——同时还会介绍常见的音频标准，如 CD 质量（44.1 kHz，16 位立体声）。
3. Computational Thinking and Algorithm Design | 计算思维与算法设计
Computational thinking is the intellectual core of the OCR Computer Science curriculum, and Year 8 pushes students to apply its three pillars — decomposition, pattern recognition, and abstraction — to increasingly complex problems. Decomposition involves breaking a large, messy problem into smaller, more manageable sub-problems. For example, when designing a program to simulate a vending machine, a student might decompose the task into: checking inserted coins, validating product selection, calculating change, and updating stock. Pattern recognition requires spotting similarities between problems or within data sets, enabling generalisation. Abstraction is the process of filtering out unnecessary detail to focus on the essential features of a problem. Students learn to create abstract models, such as a timetable system that only stores lesson names, rooms, and periods, ignoring real-world complexities like teacher availability or room capacity changes mid-term. Algorithmic thinking — systematically describing a step-by-step solution — ties these concepts together. The syllabus emphasises two formal representations of algorithms: flowcharts and pseudocode. Flowcharts use standardised symbols: ovals for start/stop, parallelograms for input/output, rectangles for processes, diamonds for decisions, and sub-routine rectangles with double vertical lines. Pseudocode instructions are written in a clear, English-like syntax, deliberately avoiding any particular programming language so that the logic is universally understandable. Students analyse classic algorithms including linear search (examining each element in a list one by one) and binary search (repeatedly dividing a sorted list in half). The efficiency of these algorithms is compared by considering the worst-case number of comparisons: for a list of n elements, linear search takes up to n checks, whereas binary search takes at most log₂(n) checks. For a list of 1000 items, linear search could require 1000 steps, while binary search needs at most about 10 steps. The bubble sort algorithm is also studied, where adjacent pairs are compared and swapped if out of order, with passes continuing until no swaps occur. Students trace through sorting examples manually to understand how the largest values bubble to the end of the list. Concepts of correctness and testing are introduced: algorithms must be verified using a range of test cases including normal, boundary (e.g., the first and last elements), and erroneous inputs.
计算思维是 OCR 计算机科学课程的智力核心，Year 8 促使学生将其三大支柱——分解、模式识别和抽象——应用到日益复杂的问题中。分解涉及将一个庞大、杂乱的问题拆解为更小、更易于管理的子问题。例如，在设计一个模拟自动售货机的程序时，学生可以将任务分解为：检查投入的硬币、验证产品选择、计算找零以及更新库存。模式识别要求在问题之间或数据集内部发现相似性，从而实现泛化。抽象则是过滤掉不必要的细节以专注于问题本质特征的过程。学生需学习创建抽象模型，例如一个课表系统，它只存储课程名称、教室和节次，而忽略诸如教师是否空闲或学期中教室容量变化等现实复杂性。算法思维——系统地描述一个逐步的解决方案——将这些概念联系在一起。课程大纲强调两种算法的形式化表示：流程图和伪代码。流程图使用标准化的符号：椭圆表示开始/结束，平行四边形表示输入/输出，矩形表示处理步骤，菱形表示决策，带有双竖线的矩形表示子程序。伪代码指令则使用清晰的、类似英语的语法编写，刻意避免依赖任何特定的编程语言，以确保其逻辑具有通用的可理解性。学生需分析经典算法，包括线性搜索（逐一检查列表中的每个元素）和二分搜索（反复将已排序的列表对半划分）。通过考虑最坏情况下的比较次数来比较这些算法的效率：对于一个包含 n 个元素的列表，线性搜索最多需要 n 次检查，而二分搜索最多需要进行 log₂(n) 次检查。对于一个包含 1000 个项目的列表，线性搜索可能需 1000 步，而二分搜索最多只需约 10 步。冒泡排序算法也是学习内容之一：比较相邻的配对元素，如果次序不对则进行交换，并通过多次遍历直到不再发生交换为止。学生通过手动追踪排序实例来理解最大值是如何“冒泡”到列表末尾的。算法正确性与测试的概念也被引入：算法必须通过一系列测试用例进行验证，这些用例包括正常情况、边界情况（例如首尾元素）以及错误输入。
4. Introduction to Text-Based Programming with Python | 基于 Python 的文本化编程入门
Year 8 marks the transition from block-based programming environments such as Scratch to a text-based language, and OCR centres typically adopt Python as the language of choice. This shift is significant because it requires students to grapple with syntax precision, indentation rules, and real-time error feedback from the interpreter. The programming unit begins with output: the print() function, which displays text strings and variable values on the console. Students learn that strings must be enclosed in quotation marks (single or double, consistently) and that multiple arguments can be separated by commas. Input is handled via the input() function, which always returns a string, necessitating type casting using int() or float() when numeric values are required. Variables are introduced as named storage locations in memory; Python uses dynamic typing, meaning a variable's type is inferred at runtime and can change. Students explore fundamental data types: int for whole numbers, float for decimal numbers, str for text, and bool for True/False values. Arithmetic operators (+, -, *, /, // for integer division, % for modulus, and ** for exponentiation) are practised extensively, alongside the order of operations (BIDMAS/BODMAS). Selection is implemented through if, elif, and else blocks, with conditions built using comparison operators (==, !=, <, >, <=, >=) and logical operators (and, or, not). Students tackle nested selection structures, where one if block sits inside another, enabling multi-layered decision-making — for instance, a grading program that first checks whether a score is a pass, and then within that, checks whether it merits a merit or distinction. Iteration is covered through two loop types. The while loop repeats as long as a condition remains true, making it ideal for scenarios where the number of iterations is unknown beforehand, such as repeatedly prompting a user until a valid password is entered. The for loop, used with the range() function, is suited for definite iteration — repeating a known number of times, as in processing each item in a list. String manipulation techniques are explored: concatenation using +, slicing to extract substrings (e.g., name[0:3] returns the first three characters), and methods such as .upper(), .lower(), and .len(). Lists are introduced as ordered, mutable collections that can hold mixed data types, with operations including appending items, accessing elements by index, and iterating through a list with a for loop. The syllabus strongly emphasises debugging skills: reading traceback error messages, identifying common syntax errors such as missing colons or inconsistent indentation, and applying logical reasoning to fix runtime and semantic errors. Students are encouraged to use comments (#) to annotate their code, explaining the purpose of each section, which aids both debugging and collaborative work.
Year 8 标志着从基于块的可视化编程环境（如 Scratch）向文本化编程语言的过渡，OCR 中心通常选择 Python 作为教学语言。这一转变意义重大，因为它要求学生应对语法精确性、缩进规则以及来自解释器的实时错误反馈。编程单元从输出开始：使用 print() 函数在控制台上显示文本字符串和变量值。学生需学习字符串必须用引号（单引号或双引号，需保持一致）括起来，并且多个参数可以用逗号分隔。输入则通过 input() 函数处理，该函数始终返回字符串，因此在需要数值时必须使用 int() 或 float() 进行类型转换。变量被介绍为内存中已命名的存储位置；Python 使用动态类型，这意味着变量的类型在运行时推断，并且可以改变。学生需探索基本的数据类型：int（整数）、float（浮点数或小数）、str（字符串）以及 bool（布尔值，True 或 False）。算术运算符（+、-、*、/、// 整除、% 取模以及 ** 幂运算）将结合运算优先级（BIDMAS/BODMAS）进行大量练习。选择结构通过 if、elif 和 else 代码块来实现，条件判断使用比较运算符（==、!=、<、>、<=、>=）和逻辑运算符（and、or、not）构建。学生将处理嵌套选择结构，即一个 if 块位于另一个 if 块内部，从而能够进行多层决策——例如，一个评分程序首先检查分数是否及格，然后在及格范围内再检查是否应评为优秀或良好。迭代通过两种循环类型来覆盖。while 循环在条件保持为真时持续重复，使其非常适用于事先未知迭代次数的场景，例如反复提示用户直到输入有效密码为止。for 循环与 range() 函数搭配使用，适用于确定次数的迭代——即已知次数的重复操作，如处理列表中的每个项目。字符串操作技术也将被探索：使用 + 进行拼接，使用切片提取子串（例如，name[0:3] 返回前三个字符），以及诸如 .upper()、.lower() 和 .len() 等方法。列表被介绍为有序的、可变的容器，可以容纳混合的数据类型，相关操作包括追加项目、通过索引访问元素以及使用 for 循环遍历列表。课程大纲特别强调调试技能：阅读回溯（traceback）错误消息、识别常见语法错误（如缺少冒号或缩进不一致），并应用逻辑推理来修复运行时错误和语义错误。鼓励学生使用注释（#）来注解代码，解释各部分的目的，这既有助于调试，也便于协作开发。
5. Networking Fundamentals and the Internet | 网络基础与互联网
The networking strand of the Year 8 OCR syllabus demystifies how computers communicate across local and global networks. Students begin by distinguishing between a Local Area Network (LAN) and a Wide Area Network (WAN). A LAN connects computers within a limited geographical area — such as a school building — using hardware like Ethernet cables, switches, and wireless access points. A WAN, by contrast, spans large distances and connects multiple LANs; the internet itself is the largest example of a WAN. The hardware components of a network are examined in detail: a Network Interface Card (NIC) provides a device with a unique MAC address and enables physical connection; a switch intelligently forwards data packets only to the intended recipient device on a LAN, unlike a hub which broadcasts to all ports; a router connects different networks together, directing packets based on IP addresses; and wireless access points (WAPs) allow devices to connect without cables using Wi-Fi (IEEE 802.11 standards). The client-server model and the peer-to-peer model are compared. In client-server networks, a central server provides resources — files, email, web pages — to multiple client devices, offering centralised management and backup but at higher cost and with a single point of failure. Peer-to-peer networks allow every device to act as both client and server, sharing resources directly, which reduces hardware costs but complicates security and backup management. The Domain Name System (DNS) is introduced as the internet's phone book: when a user types a URL such as www.ocr.org.uk, a DNS server translates this human-readable domain name into an IP address (e.g., 192.168.1.1 or an IPv6 address like 2001:0db8:85a3::8a2e:0370:7334) that routers can use to locate the destination server. The layered model of network protocols is discussed conceptually, with TCP/IP described as the fundamental protocol suite of the internet. IP is responsible for addressing and routing packets to the correct destination, while TCP ensures reliable, ordered delivery by establishing a connection, numbering packets, and requesting retransmission of any that are lost. Students contrast this with UDP, which sacrifices reliability for speed and is used in live streaming and online gaming where occasional packet loss is preferable to buffering delays. The concept of packets — small units of data into which messages are broken for transmission — is explored. Each packet contains a header (source and destination IP addresses, sequence number, protocol), a payload (the actual data), and a trailer (error-checking information). Packet switching is the method by which these packets travel independently across the network, potentially along different routes, and are reassembled into the original message at the destination.
Year 8 OCR 课程大纲的网络模块揭开了计算机如何在局域网和广域网上进行通信的神秘面纱。学生首先需区分局域网（LAN）和广域网（WAN）。局域网在有限的地理区域内（例如学校建筑内）连接计算机，使用以太网电缆、交换机和无线接入点等硬件。相比之下，广域网跨度较大，能够连接多个局域网；互联网本身就是最大的广域网实例。网络的硬件组件将被详细研究：网络接口卡（NIC）为设备提供唯一的 MAC 地址并实现物理连接；交换机智能地将数据包仅转发到局域网上的指定接收设备，这不同于集线器（hub）向所有端口广播的模式；路由器则连接不同的网络，基于 IP 地址引导数据包；无线接入点（WAP）允许设备通过 Wi-Fi（IEEE 802.11 标准）进行无线连接。客户端-服务器模型与点对点模型将被进行比较。在客户端-服务器网络中，中央服务器为多个客户端设备提供资源——文件、电子邮件、网页——具有集中管理和备份的优势，但成本较高且存在单点故障风险。点对点网络则允许每台设备同时充当客户端和服务器，直接共享资源，这降低了硬件成本，但增加了安全管理和备份的复杂性。域名系统（DNS）被介绍为“互联网的电话簿”：当用户在浏览器中输入诸如 www.ocr.org.uk 的网址时，DNS 服务器会将这个人类可读的域名转换为 IP 地址（例如 192.168.1.1 或像 2001:0db8:85a3::8a2e:0370:7334 这样的 IPv6 地址），以便路由器能够定位目标服务器。网络协议的分层模型将在概念层面进行讨论，其中 TCP/IP 被描述为互联网的基础协议族。IP 负责寻址并将数据包路由到正确的目的地，而 TCP 则通过建立连接、对数据包进行编号以及请求重传所有丢失的数据包，来确保数据传输的可靠性和有序性。学生将此与 UDP 进行对比，后者为了速度而牺牲了可靠性，主要用于直播和在线游戏等场景，在这些场景中偶尔的丢包比缓冲延迟更可取。数据包——消息在传输时被分割成的小数据单元——的概念将被深入探讨。每个数据包包含一个头部（源 IP 地址和目的 IP 地址、序列号、协议）、负载（实际数据）以及一个尾部（错误校验信息）。分组交换（packet switching）是这些数据包在网络上独立传输的方法，它们可能通过不同的路由传输，最终在目的地被重新组合成原始消息。
6. Cybersecurity Threats and Protective Measures | 网络安全威胁与防护措施
As young people spend increasing amounts of time online, the Year 8 OCR curriculum places strong emphasis on cybersecurity awareness. Students learn to identify a range of cyber threats and understand the technical and behavioural countermeasures that protect individuals and organisations. Malware — a portmanteau of malicious software — is studied in its various forms. Viruses are self-replicating programs that attach themselves to legitimate files and require user action to spread. Worms, in contrast, self-propagate across networks without any user intervention, exploiting operating system vulnerabilities. Trojans disguise themselves as desirable or benign software but carry hidden malicious payloads. Ransomware encrypts a victim's files and demands payment for the decryption key, with notable real-world examples such as the WannaCry attack that affected the NHS in 2017. Spyware covertly monitors user activity and harvests personal data, often for financial gain through targeted advertising or identity theft. Social engineering attacks exploit human psychology rather than technical weaknesses. Phishing involves fraudulent emails or messages that impersonate legitimate organisations (banks, e-commerce sites, or even school IT departments) to trick recipients into revealing passwords, credit card details, or other sensitive information. Pharming redirects users from genuine websites to fraudulent ones by tampering with DNS settings or host files, often going unnoticed by the victim. Students also discuss brute-force attacks, where automated software systematically tries every possible password combination until the correct one is found. The syllabus examines defensive strategies in depth. Strong passwords — long (at least 12 characters), containing a mix of uppercase and lowercase letters, numbers, and symbols, and unique to each service — are the first line of defence. Two-factor authentication (2FA) adds a second layer: something you know (password) plus something you have (a code sent to your phone) or something you are (biometric fingerprint or facial recognition). Antivirus and anti-malware software use signature-based detection to identify known threats and heuristic analysis to detect suspicious behaviour. Firewalls monitor incoming and outgoing network traffic, applying predefined rules to block unauthorised access while permitting legitimate communications. Biometric security measures — fingerprint scanners, iris recognition, voice recognition — are evaluated in terms of their advantages (difficult to replicate, convenient) and drawbacks (cost, privacy concerns, potential for false negatives and false positives). Data encryption is introduced at a conceptual level: plaintext is transformed into ciphertext using an encryption key, rendering intercepted data unreadable without the decryption key. Students discuss the importance of keeping software and operating systems updated, as patches frequently address newly discovered security vulnerabilities. The role of penetration testing is introduced — ethical hackers, employed by organisations, attempt to breach systems in a controlled manner to identify weaknesses before malicious attackers do. The legal framework is touched upon, including the Computer Misuse Act 1990 which makes unauthorised access to computer material, unauthorised modification of data, and the creation or distribution of malware criminal offences in the UK.
随着年轻人上网时间日益增加，Year 8 OCR 课程高度重视网络安全意识的培养。学生学习识别一系列网络威胁，并理解保护个人和组织的技术性及行为性应对措施。恶意软件（Malware，即恶意软件的合成词）将以各种形式被学习。病毒是自我复制的程序，它们附着在合法文件上，并需要用户操作才能传播。相比之下，蠕虫则无需任何用户干预即可通过网络自我传播，利用操作系统的漏洞进行扩散。特洛伊木马伪装成令人向往或良性的软件，但携带着隐藏的恶意负载。勒索软件会加密受害者的文件，并要求为解密密钥支付赎金，现实世界中有名的案例包括 2017 年影响英国国民医疗服务体系的 WannaCry 攻击。间谍软件会暗中监视用户活动并收集个人数据，通常通过定向广告或身份盗用获取经济利益。社交工程攻击利用的是人类心理而非技术弱点。网络钓鱼（Phishing）涉及冒充合法组织（银行、电子商务网站甚至学校 IT 部门）的欺诈性电子邮件或消息，诱骗收件人泄露密码、信用卡信息或其他敏感数据。域欺骗（Pharming）则通过篡改 DNS 设置或主机文件，将用户从真实网站重定向到虚假网站，而受害者往往无法察觉。学生还将讨论暴力破解攻击，即自动化软件系统地尝试每一种可能的密码组合，直到找到正确密码为止。课程大纲深入探讨了防御策略。强密码——长度较长（至少 12 个字符）、包含大小写字母、数字和符号的混合组合，并且对每项服务都保持唯一性——是第一道防线。双因素身份认证（2FA）增加了第二层保护：你知道的东西（密码）加上你拥有的东西（发送到手机的验证码）或者你是什么（生物特征，如指纹或面部识别）。杀毒和反恶意软件利用基于特征的检测技术识别已知威胁，并使用启发式分析检测可疑行为。防火墙监控流入和流出的网络流量，应用预定义的规则以阻止未经授权的访问，同时允许合法的通信。生物识别安全措施——指纹扫描仪、虹膜识别、语音识别——将从优势（难以复制、方便快捷）和劣势（成本、隐私担忧、可能出现假阴性和假阳性）两方面进行评估。数据加密将在概念层面被引入：使用加密密钥将明文转换为密文，使得被拦截的数据在没有解密密钥的情况下无法读取。学生需讨论保持软件和操作系统更新的重要性，因为补丁通常用于修复新发现的安全漏洞。渗透测试的角色也被引入——组织雇用的道德黑客以受控的方式尝试入侵系统，以便在恶意攻击者之前发现弱点。相关的法律框架也会被提及，包括 1990 年英国《计算机滥用法案》，该法案规定未经授权访问计算机资料、未经授权修改数据以及创建或分发恶意软件均属于刑事犯罪。
7. HTML and Web Development | HTML 与网页开发
Web development in Year 8 introduces students to the Hypertext Markup Language (HTML), the foundational language of the World Wide Web. The core concept students must grasp is that HTML is a markup language, not a programming language — it uses tags to describe the structure and content of a web page rather than containing executable logic. A basic HTML document follows a strict skeleton structure: it begins with <!DOCTYPE html> to declare the document type, followed by the <html> root element which contains the <head> and <body> sections. The <head> section, though not visible on the rendered page, holds metadata such as the page title (specified with <title>), links to external CSS stylesheets, and character encoding declarations (<meta charset="UTF-8">). The <body> section contains all the visible content. Heading tags <h1> through <h6> provide a hierarchical structure for text, where <h1><h6> the smallest subheading. Paragraph text is enclosed in <p> tags, and line breaks are created with the self-closing <br /> tag. Students practise creating ordered lists (<ol>) with numbered items and unordered lists (<ul>) with bullet points, each list item wrapped in <li> tags. Hyperlinks — the defining feature of hypertext — are created using the <a> anchor tag with the href attribute to specify the destination URL. Absolute URLs link to external websites (e.g., <a href="https://www.bbc.co.uk">BBC</a>), while relative URLs reference pages within the same website directory. Images are embedded using the self-closing <img /> tag with the src attribute pointing to
Published by TutorHao | Year 8 Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
或截图后用「扫一扫 → 相册」选择本图