Unit 9 · Session 3
Malware, Ethics, Firewalls, and Encryption
Today's focus
- Malware: Viruses, Worms, and Trojans
- Network Security: Firewalls and Encryption
🎯 Learning Objectives
By the end of this session, you will be able to:
- ✅ Define malware and differentiate between a virus, a worm, and a Trojan horse.
- ✅ Describe the threat of ransomware and the primary method of protection against malware.
- ✅ Define network security and its goals.
- ✅ Describe how a firewall acts as a network barrier.
- ✅ Define encryption and decryption and their role in data confidentiality.
Malware: Viruses, Worms, and Trojans
What is Malware? 🔍
Malware, short for malicious software, is any software intentionally designed to cause damage to a computer, server, client, or computer network.
It's a general term for a wide variety of digital threats.
- Viruses
- Worms
- Trojan Horses
- Ransomware
- Spyware
The Virus 🦠
A piece of malicious code that attaches itself to a legitimate program or file.
- Needs a Host: Cannot exist or spread on its own. It requires a host program to run.
- Replication: When the host program is executed, the virus runs and can replicate itself to infect other programs on the system.
- Example: An infected Microsoft Word macro that runs when you open a document.
The Worm 🐛
A standalone program that can replicate itself and spread to other computers, typically over a network.
- Standalone: Does not need to attach to another program to run or spread.
- Network Propagation: Exploits vulnerabilities in operating systems or networks to travel from one computer to another without human intervention.
- Impact: Often consumes significant network bandwidth, causing network slowdowns or crashes.
The Trojan Horse 🐴
A program that disguises itself as something useful or harmless to trick the user into installing it.
- Deception is Key: Appears to be a legitimate application (e.g., a game, a utility, a software patch).
- User-Activated: Relies on the user to download and execute the program.
- Payload: Once installed, it can perform malicious actions like stealing data, installing a backdoor, or downloading other malware.
📊 At a Glance: Virus vs. Worm vs. Trojan
Virus 🦠
- Attaches to a host file
- Needs user action to spread (e.g., running the file)
- Spreads locally first
Worm 🐛
- Standalone program
- Self-propagates over a network
- Spreads rapidly
Trojan Horse 🐴
- Disguised as legitimate software
- Tricks user into installation
- Doesn't self-replicate
The Modern Menace: Ransomware 💰
A type of malware that encrypts a user's files and demands a ransom payment in exchange for the decryption key.
⚡ Threat: Your data becomes inaccessible. Even if you pay, there is no guarantee you will get your files back.
- Infection: Often delivered via a Trojan (e.g., a malicious email attachment).
- Encryption: Silently encrypts documents, photos, and other important files.
- Demand: A ransom note appears on the screen demanding payment, usually in cryptocurrency.
Practical Application: The Threat in Nepal
Real-World Example
In recent years, Nepal has seen a rise in phishing and ransomware attacks targeting individuals and businesses.
- Phishing Scams: Fake emails or SMS messages pretending to be from banks or popular services like eSewa or Khalti, trying to steal login credentials.
- Business Impact: Small businesses and even government portals have been targeted by ransomware, disrupting services and leading to data loss.
- Lesson: Always be skeptical of unsolicited messages and verify the source before clicking links or downloading attachments.
🛡️ Primary Defense: How to Protect Yourself
The single most important defense is up-to-date antivirus software.
Antivirus software performs several critical functions:
- Scans: Actively checks files and programs for known malware signatures.
- Removes: Quarantines or deletes malicious files it discovers.
- Prevents: Monitors system activity to block new infections in real-time.
Also critical: Keep your operating system and all applications updated with the latest security patches!
Summary & Key Takeaways
- Malware is a broad term for any software designed to cause harm.
- A virus needs a host program to spread, while a worm is a standalone program that can spread on its own across networks.
- A Trojan horse deceives you into installing it by pretending to be legitimate software.
- Ransomware is a dangerous form of malware that encrypts your files and demands a payment for their release.
- Your primary defense is using up-to-date antivirus software and practicing safe computing habits.
Network Security: Firewalls and Encryption
What is Network Security?
Network Security: The policies and practices adopted to protect a computer network and its resources.
The primary goals are to:
- 🛡️ Prevent unauthorized access.
- 🔍 Monitor for misuse or modification.
- 🚫 Deny attacks and disruptions.
Our First Line of Defense: The Firewall
Think of a firewall as a digital gatekeeper for your network.
Trusted Network
(Your Home or Office)
Untrusted Network
(The Internet)
A firewall stands between these two, inspecting all traffic.
How a Firewall Works
The Definition 📖
A network security device that monitors incoming and outgoing traffic, allowing or blocking it based on a set of security rules.
The Analogy 🤔
It's like a security guard at a building entrance.
- Checks everyone's ID (IP Address).
- Has a list of allowed visitors (Rules).
- Denies entry to anyone suspicious (Blocks Traffic).
Where are Firewalls Located?
They can be software on your computer or dedicated hardware.
🏠 Home Network
Often built directly into your Wi-Fi router (e.g., from WorldLink, Vianet).
🏢 University/Corporate
Powerful, dedicated hardware devices protecting the entire campus network.
💻 Personal Computer
Software firewalls like Windows Defender or macOS Firewall protect your individual device.
Protecting the Data Itself ⚡
A firewall protects the network, but what about the information traveling across it?
This is where Encryption comes in.
Encryption and Decryption
Encryption 🔒
The process of converting readable data (plain text) into an unreadable, coded format (ciphertext).
Hello World ➡️ aJk8$Lp#wQ!z
Decryption 🔓
The process of converting ciphertext back into plain text. This requires a secret key.
aJk8$Lp#wQ!z ➡️ Hello World
The Role of the Key 🔑
Encryption uses an algorithm and a key.
Analogy: The algorithm is the type of lock (e.g., a padlock). The key is the unique physical key that can open that specific lock.
- Without the correct key, the ciphertext is just random, meaningless data.
- This is the most effective way to ensure data confidentiality.
Practical Application in Nepal 🇳🇵
Why is encryption vital for online services?
When you use services like eSewa, Khalti, or Daraz, encryption protects your:
- 💳 Payment details (bank account, card numbers).
- 👤 Personal information (name, address, phone number).
- 🔑 Login credentials (username and password).
It ensures that even if a hacker intercepts the data, they cannot read or use it.
Summary & Key Takeaways
- 🛡️ Network security is a set of practices to protect a network from unauthorized access and misuse.
- 🧱 A firewall acts as a barrier or gatekeeper, filtering network traffic based on predefined security rules.
- 🔒 Encryption scrambles data into an unreadable format to protect its confidentiality, while decryption unscrambles it with a key.
Exam Practice 📝
Short answer
- Define malware. Name any four types.
- How do ethics and morality differ in a corporate IT setting?
- What is a firewall? Differentiate between hardware and software firewalls.
- Differentiate between a virus and a worm.
Long answer
- Explain the different types of malware with examples.
- Explain the types of firewalls and how they protect an organization’s network.
Revise the answers in the full notes linked on the last slide.
Thank You
Questions before we wrap this hour?
Next: Unit 10 · Session 1 — Digital Marketing and the Digital Economy
📖 Read the full notes: Understanding Malware: Viruses, Worms, and Trojans · Professionalism, Ethics, and Morality in IT · Network Security: Firewalls and Encryption