u23 – web security & regulations
DESCRIPTION
TRANSCRIPT
U23 – WEB SECURITY &
REGULATIONS
Health Warning Please remember that the Exam Board
doesn’t provide Mas for anything beyond U4, so this is my best interpretation of the markgrids and other paperwork…
Note: this one is HEAVY on research – and the answers aren’t that easy to locate! You gotta have heart!
Health Warning – Extra!
People tend to pick this Unit because they think it is short – only has 4 AOs, right? Gotta be easy…
Oh, in your dreams…. This is a heavy-on-the-research Unit:
and for me to pass it, you’ll need up-to-date info, spot on examples, and a real understanding of the issues.
Scenario
A prominent PC- techie type magazine is doing a series of articles on the state of the World Wide Web, more than a decade after TBL suggested it to CERN. Among concerns in modern days has been cyber-terrorism in all its forms, hacking for all sorts of reasons, and general security issues.
That’s where YOU come in.
Task 1: What Are We Talking About? As always, AO1 is research. Here you need
to research and describe, with examples:3 security breaches2 examples of fraudulent use of e-
communications1 hazard through site overload
○ And a partridge in a pear tree…. OOPS! Sorry –
2 examples of hardware OR software contamination through e-communications
Oh – and explain the vulnerability of WLANS too
Task 1: What Are We Talking About? So that’s pretty much anything I tweet
about! (@Angelsoft_ICT remember!) Those fools not brave enough to tie their
names to anything, calling themselves Anonymous could be included here.
Also phishing, DDOS, flaming, hardware violations, spamming, software infections, theft of credit card details
This isn’t about LOSS: it’s THEFT you’re looking for…
Markgrid – AO1 PASS
Candidates research and provide a basic description, supported with few examples, of: ○ three security breaches, ○ two examples of fraudulent use of e-
communications, ○ one hazard through site overload ○ two examples of hardware or software being
contaminated or ruined through e-communications.
They describe, in basic terms, the vulnerability of WLANs (wireless local area networks).
Markgrid – AO1 MERIT
Candidates research and provide a detailed description, supported with appropriate examples, of: ○ three security breaches, ○ two examples of fraudulent use of e-communications, ○ two hazards through site overload ○ two examples of hardware or software being
contaminated or ruined through e-communications.
They clearly describe the vulnerability of WLANs.
Markgrid – AO1 DISTINCTION
○ Candidates research and provide a comprehensive description, supported with a variety of well chosen examples, of:
○ three security breaches, ○ two examples of fraudulent use of e-communications, ○ two hazards through site overload and ○ two examples of hardware or software being
contaminated or ruined through e-communications.
They evaluate the vulnerability of WLANs. NB – by now you’re being far more technical
about WLAN construction and security!
Task 2- Protection
So now we’re all scared witless – this is when you start to show how we can protect ourselves from most threats.
There is really nothing ‘civilised’ that can deter a serious thief: they have nothing to lose. But most thieves aren’t that inhuman – most can be persuaded otherwise…
Task 2- Protection
So show an understanding of valid measures (number depends on level – so check the grid) covering hardware AND software that a WEBSITE CONTROLLER could use. NOT a private citizen!!!
Also show understanding (depth in levels again) of two ways to control access to a website
Task 2- Protection
So that could be…Firewalls, anti-virus software, encryption
(PGP and digital sigs included here) anonymisers, remailers
Quarantine machines in the networkPasswords, machine id logs, activity
monitoring, backup and restore proceduresUser registration, password access, account
access levels…
Markgrid – AO2
PASSCandidates demonstrate a basic
understanding, supported with few examples, of four valid measures, covering hardware and software that a website controller could use.
They demonstrate a basic understanding of two ways of controlling access to a website.
Markgrid – AO2
MERITCandidates demonstrate understanding,
supported with appropriate examples, of the effectiveness of six valid measures, covering hardware, software and procedures that a website controller could use.
They demonstrate understanding of two ways of controlling access to a website.
Markgrid – AO2
DISTINCTIONCandidates demonstrate understanding,
supported with a variety of well chosen examples, of the effectiveness of eight valid measures, covering hardware, software and procedures that a website controller could use.
They demonstrate understanding of the effectiveness of two ways of controlling access to a website.
Task Three: Repairing the damage One way or another, we all get caught
by something. So how to repair the damage?Backups? (cloud or local? – issues arising?)Manual repair?File recovery?Repair Programs?
Markgrid – AO3
PASSCandidates describe generic methods of
repair. ○ Short but sweet. Even here, though, you need
a bit more than ‘try ctrl-Z’: OK?
Markgrid – AO3
MERITCandidates describe generic methods of
repair, using appropriate examples to support their descriptions.
Markgrid – AO3
DISTINCTIONCandidates describe in detail methods of
repair, using a variety of well chosen examples to support their descriptions.
Task 4: The Stinker
Yup – this is where you may well regret taking this Unit. Just remember: I did warn you…
In this AO you are looking at how website legislation has been applied by business. For the higher grades you’ll also be looking at the impact through evaluation of this action.
Task 4: The Stinker
So you’re looking at things like things like this AS A MINIMUM:PASS
○ Privacy Directive, Copyright and Intellectual Property laws
MERIT○ Pass stuff, plus e-Commerce regulations
DISTINCTION○ All of that plus accessibility requirements
Markgrid – AO4
PASSCandidates will briefly describe how
website legislation has been applied by businesses.
Their report is supported by few examples and based on limited research.
Website legislation covered will include, as a minimum, Privacy Directive and Copyright and Intellectual Property laws.
Markgrid – AO4 MERIT
Candidates will describe in detail how website legislation has been applied by businesses.
Their report is supported by a range of examples and based on research.
Website legislation covered will include, as a minimum, eCommerce regulations, Privacy Directive, Copyright and Intellectual Property laws.
Markgrid – AO4 DISTINCTION
Candidates will provide a comprehensive evaluation of how website legislation has been applied by businesses.
Their report is, supported by a wide range of examples and based on extensive research.
Website legislation covered will include, as a minimum, accessibility requirements, eCommerce regulations, Privacy Directive, Copyright and Intellectual Property laws.