Edexcel IGCSE ICT
Potential Risks to Data
Your data is constantly under threat — from hackers, malware, human mistakes, and scams — but for every risk, there's a defence. This chapter is about learning both sides of that fight.
Summary — What This Chapter Covers
Unauthorised Access
Someone getting into a network without permission — direct or indirect entry.
Accidental Deletion
Data lost through human error or power failure, not malice.
Malware
Viruses, worms, trojans, spyware, ransomware — five types, five different behaviours.
Phishing & Pharming
Two scams that trick you into handing over your own details.
Securing Data
Passwords, biometrics, CAPTCHA, anti-malware, access rights, HTTPS, email safety, backups.
Online Payment Systems
Third-party processors, bank cards, and contactless — how they work and how they're protected.
1. Unauthorised Access & Accidental Deletion
Unauthorised access is exactly what it sounds like — someone getting into a network or system without permission. Think of a network like a house. There are two ways a burglar can get in:
- Direct entry — the attacker tries to get in themselves, either by guessing, or by using software that automatically tries thousands of username/password combinations one after another. This automated guessing attack is called a brute force attack. Imagine someone standing at your front door trying every key on a giant keyring until one fits — that's basically what a brute force attack does to a login page.
- Indirect entry — instead of attacking the front door, the attacker looks for a weak window left open. They exploit vulnerabilities — flaws in software, or gaps in how careless users behave (like leaving passwords written on a sticky note) — to sneak in without needing to "force" anything.
Some hackers don't even want to steal your data directly — they want to secretly take control of your device and add it to a botnet. A botnet is a huge network of infected computers, controlled remotely, that carry out tasks like spreading malware or launching attacks — all without their owners having any idea it's happening. Your laptop could be part of a botnet right now and behave completely normally while it happens in the background.
Key Distinction
Direct entry = attacking the login itself (guessing/cracking).
Indirect entry = exploiting a weakness elsewhere (software bug, careless user, unpatched system).
Accidental Deletion
Not every data disaster is caused by a hacker — sometimes it's just bad luck or human error. Accidental deletion happens when a user:
- Presses the wrong key on a keyboard
- Formats media (like a USB stick or hard drive) on the wrong device — wiping data they didn't mean to touch
- Loses power unexpectedly — a sudden shutdown mid-save can corrupt or wipe files
Remember
This is why backups matter so much (covered later) — accidental deletion isn't malicious, but the data loss is just as real as if it were stolen.
Practice Question 1
Describe the difference between a "direct entry" and an "indirect entry" method of gaining unauthorised access to a network. [4]