Computer Security — Study Notes for HSSC CET
Overview
Computer Security is a fundamental topic in the HSSC CET Computer Knowledge section. It covers the protection of computer systems, networks, and data from unauthorized access, theft, damage, and cyber threats. With increasing digitization of government services and the emphasis on Digital India, questions on this topic test your awareness of basic security concepts that every computer user should know.
The questions are usually straightforward definitions or scenario-based problems asking you to identify the correct security measure or threat type. Mastering this topic requires understanding what each security tool does and recognizing common cyber-attack methods.
Key Concepts
- Computer Security (Cybersecurity): Protection of computer systems and information from theft, damage, unauthorized access, and disruption of services.
- Malware: Malicious software designed to harm computers — includes viruses, worms, trojans, ransomware, and spyware.
- Virus: A malicious program that attaches itself to legitimate files and spreads when the infected file is executed; requires human action to spread.
- Worm: Self-replicating malware that spreads automatically across networks without needing a host file or human intervention.
- Trojan Horse: Malware disguised as legitimate software that creates backdoors for attackers once installed.
- Ransomware: Malware that encrypts user files and demands payment (ransom) to restore access.
- Phishing: Fraudulent attempt to steal sensitive information by pretending to be a trustworthy entity through fake emails, websites, or messages.
- Firewall: A security system (hardware or software) that monitors and controls incoming and outgoing network traffic based on predefined security rules — acts as a barrier between trusted and untrusted networks.
- Antivirus Software: Programs designed to detect, prevent, and remove malware from computers.
- Encryption: Converting data into a coded format that can only be read by someone with the correct decryption key.
Formulas / Key Facts
| Term | Key Fact |
|---|---|
| Antivirus | Scans files for known malware signatures; must be updated regularly to detect new threats |
| Firewall | Can be hardware-based (router firewall) or software-based (Windows Firewall); filters traffic by IP address, port, and protocol |
| Strong Password | Minimum 8 characters; mix of uppercase, lowercase, numbers, and special symbols |
| Two-Factor Authentication (2FA) | Adds a second verification step (OTP, fingerprint) beyond just a password |
| HTTPS | Secure version of HTTP; indicated by padlock icon in browser; encrypts data between browser and website |
| Spam | Unsolicited bulk messages, often used for phishing or spreading malware |
| Spyware | Secretly monitors user activity and collects personal information |
| Keylogger | Records keystrokes to capture passwords and sensitive data |
| Backup | Copying important data to a separate location to prevent data loss |
| Windows Firewall | Built-in firewall in Windows OS; enabled by default |
Worked Examples
Example 1: Identifying Malware Type
Question: Ramesh received an email with an attachment named "Invoice.pdf.exe". After opening it, his computer started behaving strangely and he found unknown software installed. What type of malware is this?
Solution:
- Step 1: The file appears to be a PDF but is actually an executable (.exe)
- Step 2: It disguised itself as a legitimate document to trick the user
- Step 3: Once executed, it installed malicious software without consent
- Answer: Trojan Horse (disguises as legitimate file to deceive users)
Example 2: Choosing the Right Security Measure
Question: Priya wants to prevent unauthorized internet traffic from reaching her office computer. What should she enable?
Solution:
- Step 1: The requirement is to control/filter network traffic
- Step 2: Antivirus scans for malware but does not filter traffic
- Step 3: Firewall monitors and controls incoming/outgoing network traffic
- Answer: Firewall
Example 3: Password Security
Question: Which of the following is the strongest password? (A) password123 (B) Ramesh@1985 (C) 12345678 (D) R@m3$h#2K
Solution:
- Option A: Common word + simple numbers — weak
- Option B: Name + year — predictable pattern
- Option C: Only numbers, sequential — very weak
- Option D: Mix of uppercase, lowercase, numbers, special characters, no dictionary word — strongest
- Answer: (D) R@m3$h#2K
Common Mistakes
- Confusing virus and worm → Virus needs a host file and human action to spread; worm spreads automatically across networks without human intervention.
- Thinking firewall removes viruses → Firewall only filters network traffic; antivirus is needed to detect and remove malware. They serve different purposes.
- Believing HTTPS means the website is trustworthy → HTTPS only means the connection is encrypted; the website itself could still be fraudulent. Always verify the URL.
- Assuming antivirus alone provides complete protection → Antivirus is one layer; complete security needs firewall, regular updates, strong passwords, and safe browsing habits.
- Using same password for multiple accounts → If one account is compromised, all accounts become vulnerable. Use unique passwords for each account or use a password manager.
- Ignoring software updates → Updates often contain security patches. Delaying updates leaves systems vulnerable to known exploits.
Quick Reference
- Antivirus = Detects and removes malware; update it regularly
- Firewall = Filters network traffic; blocks unauthorized access
- Phishing = Fake emails/websites to steal credentials
- Strong Password = 8+ characters with uppercase, lowercase, numbers, symbols
- 2FA = Two-Factor Authentication adds extra security layer
- HTTPS + Padlock = Encrypted connection (but verify URL separately)
- Backup Data = Protects against ransomware and data loss