Three ways into the same room
A firm keeps customer records in one room on one computer. One attacker climbs in through a window. A second phones the front desk and asks for a password. A third sends a program over the internet.
Three attackers, three means. A data analyst needs to know them all, and who might use them.
Key words
| Word | What it means |
|---|---|
| Personal data | Information about a living person who can be identified. |
| Database | An organised store of data in tables. |
| Threat actor | A person or group that may attack a business. |
| Physical attack | Damage to digital systems or their surroundings. |
| Social engineering | Tricking or pressuring people to give information or access. |
| Cyber-attack | An attempt to damage, disrupt or break into computer systems, networks or devices. |
| Malware | Software made to cause harm. |
| Ransomware | Malware that locks data until money is paid. |
| Phishing | A fake message that tricks a person into giving away details. |
| Network | Computers and devices joined together so they can share data. |
The cells students fill in are left blank in this preview.
By the end of this lesson
Note
I can name the three means of attack on a business and the main threat actors.
Starter: last lesson
Have a go
Starter: last lesson
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.
Three means of attack
A physical attack damages systems or the place they are in. Theft, fire and flood are examples. Social engineering tricks people to get information. A cyber-attack tries to damage, disrupt or break into computer systems.
Attackers often mix them. A stolen pass can help a fake call.
Means of attack with data examples
| Means | What it is | Example |
|---|---|---|
| Physical | Damage to digital systems or the place they are in | A thief takes a laptop; a flood hits the server room |
| Social engineering | Manipulating people or situations | A fake call asks for a password; a fake email links to a copied login page |
| Cyber-attack | Attempts to damage, disrupt or break into systems | Ransomware locks a database; a program guesses passwords |
The cells students fill in are left blank in this preview.
Who the threat actors are
People attack for different reasons. The reason helps you guess the target.
Criminals want money. Hacktivists want to make a point. Competitors want secrets. States want information. Insiders are staff who misuse access, on purpose or by mistake.
Threat actors
| Actor | Wants | Likely target |
|---|---|---|
| Criminal group | Money | Customer data and payments |
| Hacktivist | To make a political point | A public website or a leak of private mail |
| Competitor | Business secrets | Plans, prices and research |
| State | Information and influence | Government and large firms |
| Insider | Varies, or only a mistake | Anything they can already reach |
The cells students fill in are left blank in this preview.