Common prevention methods

1.4.2 Identifying and preventing vulnerabilities

Identifying and preventing vulnerabilities — Note 1 of 8

What you need to know

There are several methods to protect computer systems and networks from threats. Each method addresses different types of attack, and a combination of methods provides the strongest defence.

What to know

Key prevention methods: penetration testing, anti-malware software, firewalls, user access levels, passwords, encryption, physical security.
No single method protects against ALL threats — a LAYERED approach combining multiple methods is most effective.

Exam technique

Tip:Know which prevention method protects against which type of attack. E.g. encryption protects against data interception; firewalls protect against DoS attacks.
Tip:Questions often ask you to RECOMMEND prevention methods for a given scenario — justify your choice by linking the method to the specific threat.
Tip:When describing a security method, say MORE than 'it manages X'. E.g. for peripheral management, don't say 'manages peripherals' — explain what that INVOLVES.

Example:Table matching — Spyware→Anti-malware. Brute-force→Encryption/strong passwords. Data interception→Encryption. SQL injection→Penetration testing/firewall.

Ready to test yourself?

Practise 1.4.2 questions

← Previous topicThe concept of SQL injection1.4.1 Threats to computer systems and networks Next note →Penetration testing1.4.2 Identifying and preventing vulnerabilities

Back to Identifying and preventing vulnerabilities

Revise another OCR GCSE topic: Threats to computer systems and networks