Добавил:
ivanov666
Опубликованный материал нарушает ваши авторские права? Сообщите нам.
Вуз:
Предмет:
Файл:ENGLISH FOR IT. Учебное пособие
.pdf
Unit 10. Information Security
161
collectively known as a botnet, (8) _____. A DDoS attack aims to make your
website and servers unavailable to legitimate users.
SQL injection attacks take advantage of vulnerabilities in web applications
that use Structured Query Language (SQL) to interact with databases. Attackers
can insert malicious SQL code into input fields on a web page to execute unauthorized actions or access sensitive data.
Cross-site scripting (XSS) attacks are a type of injection attack in which
malicious code is injected into a web page or web application. Attackers can steal
cookies, login credentials, and other sensitive information.
Man-in-the-middle (MitM) attacks are a type of eavesdropping attack in
which (9) _____.
Ransomware is a type of malware that denies access to a computer system
or data until a ransom is paid. Ransomware is one of the most dangerous types of
cybersecurity threats. Some ransomware attack techniques involve stealing sensitive information before the target system is encrypted. Such added processes
could classify some ransomware attacks as data breaches.
Social Engineering is the art of manipulating people so that they give up
their confidential information like bank account details, password etc. These
criminals can trick you into giving your private and confidential information or
they will gain your trust to get access to your computer to install a malicious
software – (10) _____.
Cyberattacks are a critical threat to organizations today. As more people
work remotely and cloud computing becomes the norm across industries, the
threat landscape has expanded exponentially in recent years. As a result, authentication has become an increasingly important mitigation strategy (11) _____.
Username and password combination is the most popular authentication
mechanism, and it is also known as password authentication.
A specific category of credentials, like username and password, are usually
said an authentication factor. Even if password authentication is the most wellknown type of authentication, other authentication factors exist. There are three
types of authentication factors typically classified as follows:
Something you know, for example, a password
Something you have, for example, a smartphone
Something you are, for example, biometric
You can combine multiple authentication factors, (12) _____. In this case,
you are using a Multiple-factor authentication (MFA) [28, 29].
Unit 10. Information Security
162
12. Read the article again and say whether the following statements are
true or false.
STATEMENTS
T/F
1
Every element of the information security program must be designed to
implement the CIA Triad.
2
Information security is a type of Cybersecurity.
3 Information security focuses on protecting data only in cyberspace.
4
Phishing is aimed at tricking individuals into disclosing sensitive personal information by claiming to be a trustworthy entity in an electronic communication.
5
A virus depends on another piece of software to become active.
6 A Worm is malicious software disguised as useful software.
7
Ransomware is designed to block access to a computer system until a
sum of money is paid.
8
There are two types of authentication factors.
9
The three authentication factors are something you know, something
you own, and something you are.
10
Username and password combination is the least popular authentication
mechanism.
13. Answer the following questions according to the article.
1. Which principle is aimed at preventing unauthorized disclosure of infor-
mation?
2. Which principle is aimed at protecting against unauthorized changes
to data?
3. Which principle is aimed at making software systems and data fully ac-
cessible
4. Which type of malware attaches itself to a host program?
5. Which type of malware is used to gain control over a target computer or
network?
6. Which type of cyberattack aims to make your website and servers una-
vailable to legitimate users?
7. Which type of cyberattack is aimed at intercepting communications be-
tween two parties?
8. Which type of malware encrypts files and demands money for the decryp-
tion key?
Unit 10. Information Security
163
9. Has Cybersecurity threat landscape grown exponentially in recent years?
Why?
14. Summarize the article. Be guided with the tips on page 201.
VOCABULARY IN USE
15. Follow the link https://rutube.ru/audio/e70cde07298273df024b19-
f6d00e73b9/ to listen to the article. Then read the article and fill the gaps.
ADVANCED MALWARE PROTECTION
Advanced malware protection software is designed (1) _____, detect, and
help remove threats in an efficient manner from computer systems. Threats can
take the form of software (2) _____ and other malware such as (3) _____, worms,
Trojans, spyware, adware, and fileless malware.
Advanced malware's goal, in general, is (4) _____ a system and avoid detection. It usually has a specific target—most often an organization or enterprise –
with the objective of financial gain. Advanced (5) _____ can take the form of
common malware that has been modified to increase its capability (6) _____.
Once loaded onto a computer system, advanced malware can (7) _____ and
insert itself into other programs or files, (8) _____ them in the process. It can
even lay dormant for a time. Advanced malware can also test for conditions of a
sandbox meant (9) _____ malicious files and attempt to fool security software
into signaling that it is not malware.
Advanced malware protection is primarily designed to help organizations
prevent (10) _____ caused by advanced malware. The (11) _____ from such
breaches can range from losing a single endpoint to incapacitating an entire IT
infrastructure, causing (12) _____ of productivity to employees and potentially
interrupting customer services and product sales and support.
Traditional (13) _____ software relies heavily upon detecting the signature
of a virus to identify and prevent damage from malware. But most malware authors stay a step ahead of such software by writing oligomorphic, polymorphic,
and more recently metamorphic (14) _____, which use obfuscation techniques
such as (15) _____ parts of themselves or otherwise modify themselves so as to
not (16) _____ virus signatures in the antivirus (17) _____.
Endpoint security that employs advanced malware (18) _____ blocks known
malware exploits accurately and efficiently without being solely dependent on
Unit 10. Information Security
164
signatures. Conversely, traditional antivirus (19) _____ can be blind to malware
in zip and other formats, as well as fileless malware, and fail to catch advanced
(20) _____ [30].
16. Read the text and fill the gaps with one of the given words:
disclosure, sensitive, in real-time, ciphertext, non-repudiation,
eavesdropping, malicious, encrypted, plaintext, an attacker,
availability, protect, intercepting, modifying
CRYPTOGRAPHY
Cryptography provides for secure communication in the presence of
(1) _____ third-parties. Encryption uses an algorithm and a key to transform
an input (i.e., (2) _____) into an encrypted output (i.e., (3) _____). A given algorithm will always transform the same plaintext into the same ciphertext if the
same key is used.
What problems does cryptography solve?
A secure system should provide several assurances such as confidentiality,
integrity, and (4) _____ of data as well as authenticity and (5) _____. Cryptography can ensure the confidentiality and integrity of both data in transit as well
as data at rest. It can also authenticate senders and recipients to one another and
protect against repudiation.
Cryptography can (6) _____ communications that traverse untrusted networks. There are two main types of attacks. Passive attacks involve (7) _____
simply listening on a network segment and attempting to read (8) _____ information as it travels. Passive attacks may be online (in which an attacker reads
traffic in real-time) or offline (in which an attacker simply captures traffic
(9) _____ and views it later—perhaps after spending some time decrypting it).
Active attacks involve an attacker impersonating a client or server, (10) _____
communications in transit, and viewing and/or (11) _____ the contents before
passing them on to their intended destination (or dropping them entirely).
The confidentiality and integrity protections offered by cryptographic protocols can protect communications from malicious (12) _____ and tampering.
Authenticity protections provide assurance that users are actually communicating
with the systems as intended.
It can also be used to protect data at rest. Data on a removable disk or in a
database can be (13) _____ to prevent (14) _____ of sensitive data should the
Unit 10. Information Security
165
physical media be lost or stolen. In addition, it can also provide integrity protection of data at rest to detect malicious tampering [31].
SPEAKING
Making comparisons, asking and giving opinions
17. Compare different cyber threats.
You can use comparatives and superlatives of these adjectives: common,
vulnerable, safe, dangerous, successful, harmful, negative. Be guided with the
tips how to make comparisons in English on page 210.
Use expressions for asking and giving opinions, responding to opinions,
agreeing and disagreeing which you can find on page 207. Choose a few expressions which you like and are comfortable with, then practice saying them.
18. Discuss these questions in small groups and then together, as a class.
1. Which cybercrimes are the most dangerous?
2. What are the risks associated with public Wi-Fi?
3. What measures can be taken by governments to stop cybercrime?
4. What are the future trends in cybersecurity?
5. Have you ever been a victim of cybercrime? Share your experience.
WRITING
Writing a comparative essay
19. Write a comparative essay (200–250 words).
Compare two antiviruses, e.g. Norton and Kaspersky, or different kinds of
authentication, e.g. Single and Multi-Factor Authentication. Use comparatives
and superlatives and a variety of adverbs to make your essay more interesting.
Visit https://www.wikihow.com/Write-a-Comparative-Essay or go to page
206 to know how to write a comparative essay.
Appendix
166
APPENDIX
HOW TO WRITE A FORMAL EMAIL:
THE BEST TIPS AND USEFUL PHRASES
Professional email structures can be broken down into three major parts −
opening, middle and closing. The opening consists of the following elements: the
subject line, greeting, and the opening line; the middle part is an email body
where you provide all the essential information, and the closing part contains the
closing line and sign-off.
Greeting
Appropriate business emails start with a formal greeting such as 'Dear Sir or
Madam,' 'Dear Mr./Mrs./Ms.,' or 'to whom it may concern.' If you are familiar with
the recipient, insert their last name, start an email with, e.g., 'Dear Mrs. Smith,' and
then move on to discuss the matter. Even if you have already sent several emails
to a specific person, each new one should start with a formal greeting.
Opening Line
After choosing an appropriate greeting, move on to an introductory sentence
that will clearly indicate the purpose of your email. An excellent sample how to
write a formal email suggests keeping the opening line to a short phrase. Mimic
the simplicity of instant messaging, which is more direct and forward than professional emails, while remaining respectful. You can always play on the given
examples.
Start business communication with the following phrases:
'I am writing with regards to….'
'I would be eager to let you know….'
'I am writing in reference to….'
If you are responding to an email, use lines such as:
'I am writing in response to….'
'I am writing to thank you for….'
'I am following up on our previous conversation….'
Email Body
This is where it gets tricky. There is no established rule on writing the text's
main body. It highly depends on the message you need to get to the audience.
Before you start writing an official email, consider drafting one.
Appendix
167
Write a formal email with short paragraphs and clear sentences that stick to
the point because too much detail often discourages recipients from reading the
email. To communicate more effectively, use bullet points. Only use capital letters where it's grammatically correct. Remember, don't use acronyms or abbreviations. You need to create an error-free email, so remember to double-check when
you are finished.
Closing Line
When you are done with making a point in the body of the email, the next
step is to come up with an appropriate closing line. An informal email could end
with a simple 'bye.' Still, you want to avoid upsetting the company employees or
your college professor with a casual goodbye when you have already put so much
effort into writing a professional email.
Make sure your email endings formal use the following phrases:
'I am looking forward to hearing from you….'
'Thank you for your cooperation on the matter….'
'Please let me know if you have any questions….'
'I hope this email provided helpful information….'
Sign Off
After composing formal email closing, it's time to finish a professional email
with an impactful sign-off. Make sure to leave the recipient satisfied with casual
sign-off. End your email message with phrases such as:
'Best regards,'
'Best wishes,'
'Sincerely,'
'Yours truly,'
'Fond regards,'
'Thank you in advance,'
'With gratitude,'
Sign-offs should always be followed by an email signature, which provides
your reader with helpful information they need to contact you, including your full
name, your position, the company's address, and social media icons.
HOW TO WRITE AN OPINION ESSAY
The structure should be the following:
− introduction stating the problem;
Appendix
168
− your personal opinion supported by a few reasons;
− an opposing opinion supported by a few reasons;
− your reasons why you do not support the opposing opinion;
− a conclusion reiterating your view.
Linkers or transitional words make any text more readable and smoothly
translate the reader from one idea to another. Take a look at a couple of examples
of good transition words for an opinion essay:
Linkers and Transitional
Words for Opinion Essay
To express your opinion:
In my opinion…
I think…
I believe…
It is clear that…, etc.
To express some facts:
It is widely known that…
It is a well-known fact that…
Research has shown that…
There are definitely…
It is a fact that…, etc.
To express contrast:
Although…
Despite…
In spite of…
Whereas…
However, etc.
To conclude:
To sum up…
To conclude…
In conclusion…, etc.
USEFUL VOCABULARY FOR CREATING
PRESENTATIONS IN ENGLISH
THE PRESENTATION
STRUCTURE
THE USEFUL
PHRASES
1
Opening statement
Welcome.
As you all know, cloud computing services
have been rapidly developing recently…
Appendix
169
THE PRESENTATION
STRUCTURE
• THE USEFUL
PHRASES
2
Overviews
Say what your presentation is
about, how long you will take and
how you are going to handle questions.
• “My presentation is in three parts.”
• “My presentation is divided into three
main sections.”
• “Firstly, secondly, thirdly, finally…”
• “I’m going to… take a look at… talk
about… examine… tell you something
about the background… give you some
facts and figures… fill you in on the history
of… concentrate on… limit myself to the
question of…
• “Please feel free to interrupt me if you
have questions.”
• “There will be time for questions at the
end of the presentation.”
• “I’d be grateful if you could ask your
questions after the presentation.”
3
The main body of the presentation
During your presentation, it’s a
good idea to occasionally remind
your audience why your presentation and ideas are important or relevant.
• “As I said at the beginning…”
• “This, of course, will help you”
• “As you remember, we are concerned
with…”
• “This ties in with my original state-
ment…”
• “This relates directly to the question I
put to you before…”
4
Keeping your audience with you
You are clear about the structure
of your talk, but let your audience
know when you are moving on to
a new point.
• “I’d now like to move on to…”
• “I’d like to turn to…”
• “That’s all I have to say about…”
• “Now I’d like to look at…”
• “This leads me to my next point…”
5
It’s important to introduce visuals to the audience.
• “This graph shows you…”
• “Take a look at this…”
• “If you look at this, you will see…”
• “I’d like you to look at this…”
• “This chart illustrates the figures…”
• “This graph gives you a break down
of…”
Appendix
170
THE PRESENTATION
STRUCTURE
• THE USEFUL
PHRASES
• “As you can see…”
• “This clearly shows …”
• “From this, we can understand how /
why…”
• “This area of the chart is interesting…”
6
Summarising
• “That brings me to the end of my presenta-
tion. I’ve talked about…”
• “Well, that’s about it for now. We’ve cov-
ered…”
• “So, that was our marketing strategy. In
brief, we…”
• “To summarise, I…”
7
Relate the end of your presentation to your opening statement.
• “So I hope that you’re a little clearer on
how we can achieve sales growth of 20%.”
• “To return to the original question, we can
achieve…”
• “So just to round the talk off, I want to go
back to the beginning when I asked you…”
• “I hope that my presentation today will
help you with what I said at the begin-
ning…”
8
Handling questions
Thank the audience for their attention and invite questions.
• “Thank you for listening – and now if
there are any questions, I would be pleased
to answer them.”
• “That brings me to the end of my presenta-
tion. Thank you for your attention. I’d be
glad to answer any questions you might
have.”
HOW TO WRITE AN ADVANTAGES AND
DISADVANTAGES ESSAY
Introduce the topic
You should begin with a background sentence which introduces your reader
to the topic of the essay. The best way to do this is to paraphrase the topic statement.
Соседние файлы в предмете [НЕСОРТИРОВАННОЕ]