Years 9–10 Digital Systems Crossword: Threats and software vulnerabilities to Software supply chain vulnerabilities (Modules 41–69)
Name:
Date:
Class:
✎
Crossword
Read each clue and write the matching term in the grid. Numbers in brackets show the letters in each word.
1
2
3
4
5
6
7
8
Across
- 2. Harm to data or systems caused by someone with legitimate access, either on purpose (malicious insider) or by mistake, like emailing the wrong person or setting a file to public. Word 2 of: insider ______ (6)
- 4. ______ adds a digital signature to software so a computer can check it came from the named publisher and has not been changed since it was signed. Word 1 of: ____ signing (4)
- 5. Word 2 of the term in 4 Down: ________ ______ _____ (6)
- 6. An attack where database commands are typed into an input field and run because the program joins the input straight into a query. Parameterised queries stop it. Word 2 of: SQL _________ (9)
- 7. An ______ where criminals hide malicious code in a trusted supplier's software update, so users install it believing it is safe. Word 3 of: ______ _____ ______ (6)
- 8. Word 1 of the term in 3 Down: ____-___ (4)
Down
- 1. A library or package written by someone else that your program imports and relies on. If it has a flaw, every app that uses it is affected, including via dependencies of dependencies. (10)
- 3. A vulnerability that attackers know about before the software maker has released a fix. With no patch available yet, defenders rely on workarounds and monitoring. Word 2 of: ____-___ (3)
- 4. Everything used to make and deliver ______: code libraries, tools, build systems, suppliers and updates. Most of an app is other people's code, so you trust every link in the ______. Word 3 of: ________ ______ _____ (5)
- 5. Word 1 of the term in 4 Down: ________ ______ _____ (8)
Answer Key
Years 9–10 Digital Systems · Modules 41–69
1D
2T
H
R
E
A
T
3D
P
A
4C
O
D
E
5S
U
P
P
L
Y
H
N
O
A
D
F
6I
N
J
E
C
T
I
O
N
N
N
W
C
7A
T
T
A
C
K
Y
R
8Z
E
R
O
Across
2THREAT — Harm to data or systems caused by someone with legitimate access, either on purpose (malicious insider) or by mistake, like emailing the wrong person or setting a file to public. Word 2 of: insider ______
4CODE — ______ adds a digital signature to software so a computer can check it came from the named publisher and has not been changed since it was signed. Word 1 of: ____ signing
5SUPPLY — Word 2 of the term in 4 Down: ________ ______ _____
6INJECTION — An attack where database commands are typed into an input field and run because the program joins the input straight into a query. Parameterised queries stop it. Word 2 of: SQL _________
7ATTACK — An ______ where criminals hide malicious code in a trusted supplier's software update, so users install it believing it is safe. Word 3 of: ______ _____ ______
8ZERO — Word 1 of the term in 3 Down: ____-___
Down
1DEPENDENCY — A library or package written by someone else that your program imports and relies on. If it has a flaw, every app that uses it is affected, including via dependencies of dependencies.
3DAY — A vulnerability that attackers know about before the software maker has released a fix. With no patch available yet, defenders rely on workarounds and monitoring. Word 2 of: ____-___
4CHAIN — Everything used to make and deliver ______: code libraries, tools, build systems, suppliers and updates. Most of an app is other people's code, so you trust every link in the ______. Word 3 of: ________ ______ _____
5SOFTWARE — Word 1 of the term in 4 Down: ________ ______ _____