ACARA Digital Technologies Years 9–10 Crossword: Cyber Security Threats and Vulnerabilities (Modules 782–809)
Name:
Date:
Class:
✎
Crossword
Read each clue and write the matching term in the grid. Numbers in brackets show the letters in each word.
1
2
3
4
5
6
7
8
9
10
Across
- 2. Tricks that gain physical access: ______ follows an authorised person through a secure door, and baiting leaves an infected USB drive for someone to plug in. Word 1 of: __________ and baiting (10)
- 5. One sentence naming the actor, the vulnerability they use, the asset at risk and the impact, using because to link cause and effect. Word 2 of: ______ _________ (9)
- 8. Each ______ threat attacks at least one part of the ______ triad. Tampering hits integrity, denial of service hits availability, spoofing and information disclosure hit confidentiality. Word 2 of: ______ ____ to ___ (4)
- 9. Word 1 of the term in 8 Across: ______ ____ to ___ (6)
- 10. Word 4 of the term in 8 Across: ______ ____ to ___ (3)
Down
- 1. Checking that data a user enters is the expected type, length and format before the program uses it, so bad or harmful ______ is rejected. Word 1 of: _____ validation (5)
- 3. A diagram with the attacker's goal at the top, branching into the different ways to reach it. OR branches are alternatives; AND branches are steps that are all needed. Word 2 of: attack ____ (4)
- 4. An attack where a page shows untrusted input, like a comment, without cleaning it, so the attacker's script runs in other users' browsers and can steal cookies. Escape output to stop it. (3)
- 6. Word 1 of the term in 5 Across: ______ _________ (6)
- 7. Check and update a threat ______ whenever the system, its users or the known threats change, for example after adding a new feature, a new dependency or a new control. Word 4 of: Review the ______ _____ (5)
Answer Key
ACARA Digital Technologies Years 9–10 · Modules 782–809
1I
2T
A
I
L
G
A
3T
I
N
G
R
P
4X
E
U
5S
T
A
6T
E
7M
E
N
T
8M
A
P
S
H
O
9S
T
R
I
D
E
E
E
10C
I
A
L
T
Across
2TAILGATING — Tricks that gain physical access: ______ follows an authorised person through a secure door, and baiting leaves an infected USB drive for someone to plug in. Word 1 of: __________ and baiting
5STATEMENT — One sentence naming the actor, the vulnerability they use, the asset at risk and the impact, using because to link cause and effect. Word 2 of: ______ _________
8MAPS — Each ______ threat attacks at least one part of the ______ triad. Tampering hits integrity, denial of service hits availability, spoofing and information disclosure hit confidentiality. Word 2 of: ______ ____ to ___
9STRIDE — Word 1 of the term in 8 Across: ______ ____ to ___
10CIA — Word 4 of the term in 8 Across: ______ ____ to ___
Down
1INPUT — Checking that data a user enters is the expected type, length and format before the program uses it, so bad or harmful ______ is rejected. Word 1 of: _____ validation
3TREE — A diagram with the attacker's goal at the top, branching into the different ways to reach it. OR branches are alternatives; AND branches are steps that are all needed. Word 2 of: attack ____
4XSS — An attack where a page shows untrusted input, like a comment, without cleaning it, so the attacker's script runs in other users' browsers and can steal cookies. Escape output to stop it.
6THREAT — Word 1 of the term in 5 Across: ______ _________
7MODEL — Check and update a threat ______ whenever the system, its users or the known threats change, for example after adding a new feature, a new dependency or a new control. Word 4 of: Review the ______ _____