Years 9–10 Digital Systems Definitions Worksheet: Threats and software vulnerabilities to Software supply chain vulnerabilities (Modules 41–69)
Name:
Date:
Class:
✎
Key terms
Write what each term means, in your own words.
1
SQL injection
2
buffer overflow
3
zero-day
4
insider threat
5
software supply chain
6
dependency
7
Supply chain attack
8
typosquatting
9
Code signing
10
SBOM
Answer Key
Years 9–10 Digital Systems · Modules 41–69 · Student wording will vary for definitions
1SQL injection — An attack where database commands are typed into an input field and run because the program joins the input straight into a query. Parameterised queries stop it.
2buffer overflow — When a program writes more data into a memory area than it can hold, spilling over and overwriting nearby memory. This can crash the program or let an attacker run their own code.
3zero-day — A vulnerability that attackers know about before the software maker has released a fix. With no patch available yet, defenders rely on workarounds and monitoring.
4insider threat — Harm to data or systems caused by someone with legitimate access, either on purpose (malicious insider) or by mistake, like emailing the wrong person or setting a file to public.
5software supply chain — Everything used to make and deliver software: code libraries, tools, build systems, suppliers and updates. Most of an app is other people's code, so you trust every link in the chain.
6dependency — A library or package written by someone else that your program imports and relies on. If it has a flaw, every app that uses it is affected, including via dependencies of dependencies.
7Supply chain attack — An attack where criminals hide malicious code in a trusted supplier's software update, so users install it believing it is safe.
8typosquatting — Publishing a malicious package or site with a name almost the same as a trusted one (like reqeusts for requests), hoping people install or visit it by mistake.
9Code signing — Code signing adds a digital signature to software so a computer can check it came from the named publisher and has not been changed since it was signed.
10SBOM — A software bill of materials: a list of every component and library inside a piece of software, with version numbers, so owners can check each one for known vulnerabilities.