Understand the threat to digital systems posed by malware (viruses, worms, Trojans, ransomware, key loggers), how hackers exploit technical vulnerabilities and use social engineering, and methods of protecting digital systems and data (anti-malware, encryption, acceptable use policies, backup and recovery).

What this dot point is asking

Edexcel wants you to describe the threats from malware (viruses, worms, Trojans, ransomware, key loggers), how hackers exploit technical vulnerabilities and social engineering, and the methods of protecting systems and data (anti-malware, encryption, acceptable use policies, backup and recovery).

Malware

The exam discriminators matter. The classic one is virus versus worm: a virus needs to attach to a file and be run by the user, whereas a worm self-replicates across networks on its own. A Trojan is defined by disguise (it pretends to be legitimate). Ransomware is defined by encrypt-and-demand-payment. A key logger is defined by recording keystrokes. Knowing each by its distinctive behaviour lets you answer "which malware" and "describe the difference" questions.

How hackers attack

There are two routes in: the technology and the people. Technically, software that has not been updated may contain known weaknesses that attackers exploit, which is why keeping software and anti-malware up to date matters. But often the easier route is the people: social engineering manipulates users into handing over passwords or clicking malicious links. Phishing emails or messages that look legitimate are the classic example, persuading the victim to reveal details or install malware. Because it targets human trust, no purely technical defence fully stops social engineering, training is essential.

Protecting systems and data

These defend in different ways. Anti-malware stops and removes malicious software. Encryption protects the confidentiality of data, so even if it is stolen it cannot be read without the key (vital for personal and financial data). Acceptable use policies and training address the human factor, reducing the chance of social engineering succeeding. Backup and recovery is the safety net: if data is lost, corrupted or held to ransom, recent backups let it be restored without paying a ransom. Layering these gives strong protection.

Try this

Q1. State what ransomware does. [1 mark]

• Cue. It encrypts the victim's files (or locks the system) and demands a payment for the decryption key.

Q2. State one method of protecting data so it is unreadable if stolen. [1 mark]

• Cue. Encryption (scrambling the data so it cannot be read without the key).