WA Computer Science ATAR Unit 2 Definitions Worksheet: Cyber Security (Modules 125–266)
Name:
Date:
Class:
✎
Key terms
Write what each term means, in your own words.
1
exploit
2
threat actor
3
attack surface
4
cyber security incident
5
Virus
6
tailgating and baiting
7
penetration test
8
vulnerability scan vs penetration test
9
penetration test phases
10
Black, grey and white box testing
11
written authorisation
12
penetration test report
13
computer offence
14
responsible disclosure
15
code of ethics
Answer Key
WA Computer Science ATAR Unit 2 · Modules 125–266 · Student wording will vary for definitions
1exploit — A method or piece of code that takes advantage of a vulnerability (the weakness) to attack a system. The vulnerability is the flaw; the exploit is the tool that uses it.
2threat actor — A person or group that carries out a cyber attack, described by their motive (money, cause, grievance, spying) and skill, such as cybercriminals, hacktivists, insiders and nation-state groups.
3attack surface — All the points where an attacker could try to get into a system or take data out, such as open ports, running services and user accounts. A smaller surface means fewer ways in.
4cyber security incident — An event that actually or potentially compromises the confidentiality, integrity or availability of data or systems, such as a data breach or a malware infection.
5Virus — Malware that attaches to a host file and spreads by replicating itself when a user runs the infected file
6tailgating and baiting — Physical social engineering: tailgating follows an authorised person through a secure door, while baiting leaves an infected USB drive for someone to plug in.
7penetration test — An authorised, simulated attack on a system by an ethical (white-hat) hacker to find vulnerabilities before real attackers (black-hat) do, so the weaknesses can be fixed.
8vulnerability scan vs penetration test — A vulnerability scan is an automated check that lists known weaknesses, some false positives. A penetration test is manual: testers try to exploit them to prove the real impact.
9penetration test phases — The ordered stages of a penetration test: planning, reconnaissance, scanning, gaining access, maintaining access, then reporting, with clean-up of any changes made.
10Black, grey and white box testing — Test approaches defined by what the tester knows beforehand: black box knows nothing (outsider view), grey box knows some (insider view), white box knows everything (full knowledge).
11written authorisation — Written permission from the system owner that sets the scope: which systems, methods and time window a tester may use. Testing outside it is illegal.
12penetration test report — A confidential document listing each finding with its risk rating, evidence and recommended fix, so the client can remediate the problems and then retest to confirm they are fixed.
13computer offence — A crime under the Cybercrime Act 2001 (Cwlth) and the WA Criminal Code: accessing, changing or impairing computer data or systems without authorisation. Authorisation is a defence.
14responsible disclosure — Privately reporting a vulnerability you found to its owner and giving them time to fix it before telling the public, so attackers can't exploit it.
15code of ethics — A set of rules for professional conduct, such as the ACS Code of Ethics: be honest, keep client data confidential, avoid harm, declare conflicts of interest and act in the public interest.