Английский язык. Ч.2. Учебное пособие по грамматике, чтению и переводу

2.I don’t like _________ my passwords every month. It’s so annoying!

3.He really enjoys _________ about new cybersecurity techniques.

4.I believe there’s nothing wrong with __________ precautions for your digital security.

5.I can't stand ________ new passwords for my accounts as I always forget these complex combinations of numbers and letters.

6.I usually work remotely, and it is really convenient to keep my work-life balance. For example, next week I plan to go _________.

7.I believe that nowadays it’s almost impossible to avoid ________ monitored by surveillance cameras in public places.

8.I don’t mind ________ regular scans on my computer - it helps a lot to keep my files protected from malware.

9.You risk ________ important information every time you download suspicious

files from the Internet.

10.Don’t you think you waste your time ________ multiple searches on different search engines?

Exercise 11 Complete the sentences with the information about you, using the patterns below. Mind gerunds.

1.I always enjoy…

2.I really can’t stand…

3.I can easily imagine…

4.I would like to thank my parents for…

5.I am used to …

6.I would praise myself for…

7.I am never tired of…

8.I don’t feel like …

Exercise 12 Choose the correct option of the word before the gerund (ing-form). Translate the text.

When people say cyber, they consider/ plan using computers and information technology. Cybersecurity specialists are looking forward to/ responsible for protecting sensitive data, computer systems, networks, and software applications from computer-based attacks.

Cybersecurity is about how individuals and organizations try to manage/avoid being exposed to cyberattacks (that is, computer-based attacks). Cybersecurity includes a wide range of different measures, concepts, and guidelines, that are aimed at/ imagine protecting computers, servers, mobile devices, and networks

31

connected to the Internet against unauthorized access, data theft, attacks, and manipulation in cyberspace.

Talking about the three pillars of cybersecurity we mind/ think developing new technologies, maintaining processes, and training people. To provide the protection needed we praise for/ rely on taking technological measures, but they do not exist in a vacuum. We need processes for/ to governing the use of technologies. We also go/need hiring the right people to use the technologies correctly and to ensure that others are doing so too.

Because cybersecurity has so many facets that depend on/ risk cooperating with each other, it is often referred to as an ecosystem. The cybersecurity ecosystem contains a wide range of technical measures (such as firewalls, cryptography, VPN, or SSL), behavioral measures (such as policies for humans to follow), and legal measures (such as laws that protect people and companies).

[abridged from “Cybersecurity for dummies” by Maria Bada]

Exercise 13 Correct the mistakes in the sentences.

1.After that terrible cyber-attack, our system needs to taking immediate actions.

2.If you run a business, protect it from hackers and cybercriminals can be a daunting task.

3.Because of ransomware or phishing attacks many enterprises risk to pay huge fines, losing their reputation, or even going out of business.

4.To having the right cyber security strategies can help you defend your business and customer data.

5.Malware can having various types, but all of them are designed to dupe users into installing them into their systems.

6.The aim of the spyware is collecting information about a target device's activities and secretly transmit data from the storage.

7.Hackers admit use password sniffing to intercept login credentials as they traverse a network.

8.That cybercriminal denied about exploiting vulnerabilities in the security defenses of a target's infrastructure.

9.Some attackers keep to use social engineering attacks to compromise the security of an organization's communication channels.

10.We are highly interested of defending our business against all types of cyberattacks.

Exercise 14 Read the recommendations on how to behave after a cyber-attack. Fill in the gaps with the ing-forms from the box. Use Russian equivalents to make the right choice.

32

What to do after a cyber-attack?

1. Ensure the breach is isolated

If you become a victim of a cyber-attack, (1) _______ (действовать) quickly is the most important thing. Otherwise, a small problem can result in (2) ______

(выходить) beyond your control. So, be sure to take immediate action the moment you realize something is wrong.

You can identify which systems have been affected by (3) _________ (изолировав) the section of your network that has been compromised. This way, your IT team can effectively begin (4) ________ (исследование) the breach and hopefully discover how it happened.

In turn, this could potentially mean (5) _______ (предотвращение) a similar attack from (6) ________ (появления) in the future.

2. Cut off your Internet connection

After (7) ________ (осознания) that your systems have been breached by a cybercriminal, it’s important to switch off your internet system to prevent viruses from (8) ________ (распространения) further and (9) ________ (причинения) more damage to other PCs that are on the same network. By (10) _________

(отключая) your internet connection, you can help to prevent further damage caused by attacks. Thus, you can spend your time (11) _______ (на очистку) the affected computers and (12) ________ (избавление) of any viruses or malware. Only when you have identified the cause of the issue should you consider (13)

_________ (включить) the internet back on.

3. Utilize new technologies

After a cyber-attack has affected your systems, you should delay (14) _________

(принятие) precautions in order to prevent a similar breach from (15) _______

(появление) again in the future. You can create a stronger line of defense by (16)

________ (обновив) or getting rid of your inferior technologies and (17) _________

33

(заменив) them with new ones which include artificial intelligence (AI) systems and security software.

It is the most recommended practice to protect your Internet connection by (18)

________ (установив) a reliable VPN on all your devices. Alternatively, you may install the VPN on your router and keep all your devices protected at the same time.

4. Closely monitor affected systems

(19) ________ (оставаться) vigilant after a cyber-attack is something that’s incredibly important. Otherwise, the negative impact caused will only become worse.

To prevent (20) _________ (ухудшение) worse, keep (21) ________ (наблюдать за) the attacked systems. This way, you’ll make sure you don’t miss anything.

Hackers sometimes think of (22) _________ (повторение) the attack and install back doors in order to do this.

5. Change your passwords

(23) ______ (смена) your passwords is of fundamental importance after a data breach has occurred. After all, it’s likely that cybercriminals will have accessed such private information along with names, addresses, and other personal data.

New passwords require (24) _________ (быть обновленными) to something that is secure yet memorable. Under no circumstances should you consider (25) ______

(использование) the same one for multiple accounts as this makes you more vulnerable to cybercrime.

If you struggle with (26) ________ (выбрать) a new password, you may use password managers. So, (27) _______ (сохранение) your accounts secure with unique passwords is easier than ever.

[from https://vpncentral.com/what-to-do-after-cyber-attack/]

Exercise 15 Translate the sentences into Russian. Define the functions of the ingforms.

1.Protecting your online identity is crucial in today’s digital world.

2.The best way to protect your device from malware is installing a robust antivirus software.

3.My grandma stopped searching for information on unsafe websites, because she’s afraid of downloading malware accidentally.

4.Before creating a new online account, I always check the website’s security measures.

34

5.To tell the truth, I am a little bit annoyed with the necessity of hiding my personal data.

6.There are many methods of protecting your data online.

7.By coding securely, developers can significantly reduce the risk of vulnerabilities.

8.Studying cybersecurity is a prospective career path.

Exercise 16 Translate the sentences into English.

1.Изучение основ кибербезопасности поможет школьникам в использовании онлайн-ресурсов.

2.Ты когда-нибудь рассматривал поступление в технический университет?

3.Он сделал такую глупую ошибку, что я не мог не рассмеяться.

4.После той серьезной проблемы с компьютером в аудитории он отрицает, что был там.

5.Жду с нетерпением получения от тебя нового плана по улучшению защиты от хакерских атак.

6.Я не возражаю помочь тебе с курсовой работой, но нужно договориться о встрече заранее.

7.Существует много способов защиты ваших личных данных, нужно только постепенно внедрять их как полезные привычки.

8.Мой друг очень хорошо разбирается в вопросах кибербезопасности, ему нравится (to enjoy) разрабатывать новые способы защиты от угроз.

9.Ты должен срочно сделать все, чтобы предотвратить распространение вируса по системе.

10.Когда ты оставляешь компьютер без присмотра, ты рискуешь потерять свои данные.

2.3 Cybersecurity practices and technologies

Exercise 17 Translate the following expressions into Russian.

•to prevent cyberattacks

•to mitigate the impact

•to protect computer against malware

•to reduce vulnerabilities

•to intercept attacks

•to avoid phishing

•to be engaged in risky behavior

•to enforce access control

•to assess risks

35

•to identify target

•to fail over to a backup

Exercise 18 Fill in the missing words in the sentences. Use the vocabulary from above.

1.We couldn’t prevent this cyber-attack but we can at least i___________ it.

2.As a white hat hacker, he does research on potential vulnerabilities of a system, i_________ possible threat actors’ targets and shows how to avoid cybersecurity problems.

3.This AI-powered antivirus p________ your computer __________ malware during everyday work.

4.Companies can also take steps to reduce v__________ of their systems.

5.Security awareness courses teach people how not to be e______ __ ____

behavior, how to a_______ ph_______ attacks and use social media safely.

6.An IT and cybersecurity specialists play a vital role in designing software to p__________ cyberattacks.

7.To avoid and remedy great data loss happening in the businesses they may switch to a failover mode, which makes the system fail o_______ to _ b_______.

8.We conducted the research to a_______ the risks of the system’s failure in case of a cyberattack.

9.Java Authentication and Authorization Service is a package that provides

services to e______ access c________ upon users.

10.The support of our partners was essential for us to m__________ the impact of the recent hacker’s attack.

Exercise 19 Read the text. Fill in the gaps (1-6) with the cybersecurity practices and technologies(A-F).

A.Attack surface management

B.Data security tools

C.Disaster recovery

D.Identity and access management

E.Security awareness training

F.Threat detection and response

Exercise 20 Translate the phrases in bold from the text.

Key cybersecurity best practices and technologies

protect computer systems, applications, devices, data, financial assets and people against ransomware and other malware, phishing scams, data theft and other cyberthreats.

[2] Each organization’s cybersecurity strategy differs, but many of them use the following tools and tactics to reduce vulnerabilities, prevent attacks and intercept attacks in progress:

[3](1) ____________________ helps users understand how seemingly harmless actions – from using the same simple password for multiple log-ins to oversharing on social media – increase their own or their organization’s risk of attack.

Combined with thought-out data security policies, training can help employees protect sensitive personal and organizational data. It can also help them recognize and avoid phishing and malware attacks.

[4](2) ______________________, such as encryption and data loss prevention (DLP) solutions, can help stop security threats in progress or mitigate their effects. For example, DLP tools can detect and block attempted data theft, while encryption can make it so that any data that hackers steal is useless to them.

[5](3) ______________________________ refers to the tools and strategies that control how users access resources and what they can do with those resources. IAM technologies can help protect against account theft. For example, multifactor authentication requires users to supply multiple credentials to log in, meaning threat actors need more than just a password to break into an account.

[6]Likewise, adaptive authentication systems detect when users are engaging in risky behavior and raise additional authentication challenges before allowing them to proceed. A zero-trust architecture is one way to enforce strict access controls by verifying all connection requests between users and devices, applications and data.

[7](4) __________________________ is the continuous discovery, analysis, remediation and monitoring of the cybersecurity vulnerabilities and potential attack vectors that make up an organization’s attack surface.

[8]Unlike other cyberdefense disciplines, ASM is conducted entirely from a hacker’s perspective rather than the perspective of the defender. It identifies targets and assesses risks based on the opportunities they present to a malicious attacker.

[9](5) _____________________________ is provided by Analyticsand AI-driven technologies that can help identify and respond to attacks in progress. These technologies can include security information and event management (SIEM), security orchestration, automation and response (SOAR) and

37

endpoint detection and response (EDR). Typically, organizations use these technologies as part of a formal incident response plan.

[10](6) _______________ capabilities can play a key role in maintaining business processes and remediating threats in the event of a cyberattack. For example, the ability to fail over to a backup can help a business to resume operations after a ransomware attack.

[11]Cybersecurity is important because cyberattacks and cybercrime have the power to disrupt, damage or destroy businesses, communities and lives. Successful cyberattacks lead to identity theft, personal and corporate extortion, loss of sensitive information and business-critical data, temporary business outages, lost business and lost customers and, in some cases, business closures.

Exercise 21 Answer the following questions.

1.What are the main tasks of cybersecurity?

2.What is security awareness and how can it help in cybersecurity?

3.How does adaptive authentication work?

4.What can cyberattacks do with a business?

5.Why is encryption one of the effective data security tools?

6.Is failover a recovery or threat detection tool?

7.How can multifactor authentication save your data?

8.What technologies are used in threat detection and response strategy?

Exercise 22 Explain the meaning of the following words and phrases from the text (in English).

•threat actor

•seemingly harmless

•sensitive data

•multifactor authentication

•cybersecurity vulnerabilities

•phishing scam

•incident response plan

•have the power

Exercise 23 Create 3 sentences with the words and phrases from the exercise above.

Exercise 24 Read the abstracts from the text. Try to recall the words and phrases that are written in Russian.

38

1.Cybersecurity нацелена на защиту computer systems, applications, devices, data, financial assets and people от ransomware and other malware, phishing scams, кражи данных and other cyberthreats.

2.Cybersecurity is important because cyberattacks and cybercrime обладают способностью to disrupt, наносить вред или уничтожать businesses, communities and lives.

3.Identity and access management (IAM) имеет отношение к the tools and strategies that control how users осуществляют доступ к resources and что они могут делать с those resources.

4.Combined with продуманной data security policies, training can help сотрудникам protect конфиденциальные personal and organizational data.

5.Disaster recovery capabilities могут играть ключевую роль in maintaining business processes and ликвидации последствий threats в случае a cyberattack.

6.В отличие от other cyberdefense disciplines, ASM is conducted entirely с точки зрения хакера rather than the perspective of the defender.

7.Например, multifactor authentication требует от пользователя to supply multiple credentials to log in, meaning злоумышленникам need больше чем просто a password to break into an account.

Exercise 25 Match the columns A and B to make up collocations. Use the text (paragraphs 1, 5, 6, 9, 11) for reference. Can you make up more than one collocation?

Exercise 26 Translate the sentences into English.

1.Термин “failover” имеет отношение к восстановлению системы после кибератаки.

2.Чтобы уменьшить уязвимости системы, мы должны посмотреть на нее с точки зрения хакера.

3.Наша работа нацелена на смягчение влияния недавнего сбоя в работе сети.

39

4.Как наш сотрудник, ты не можешь вести себя рискованно.

5.Чтобы защитить компьютеры от действия вредоносного ПО, мы должны использовать все стратегии и инструменты.

6.Мы провели обучение по безопасности в нашей компании, чтобы избежать внутренних угроз.

7.Чтобы предотвратить кражу данных клиентов, мы используем многофакторную систему защиты.

8.Фишинг относится к одному из способов перехватить конфиденциальные данные пользователя.

9.Наша политика защиты данных должна быть более продуманной.

10.Чтобы украсть закодированную информацию, нужно больше, чем просто пароль пользователя.

2.4 Speaking

Exercise 27 Why oversharing on social media can cause problems? Give your examples and reasons.

Exercise 28 Use the Internet to find some information about zero-trust architecture. What are the basic principles of it?

40