What is the purpose of memory management in an operating system?

To allocate and deallocate memory for processes

To create a graphical user interface

What is the function of a user interface in an operating system?

To provide a way for users to interact with the computer system

To organize files on the system

What is the purpose of peripheral management in an operating system?

To control and communicate with external devices connected to the system

To allocate memory for processes

What is the main function of user management in an operating system?

To control user access to resources and system settings

To manage memory allocation for processes

To communicate with external devices

To provide a graphical user interface

What is the role of file management in an operating system?

To organize, store, and retrieve data in an efficient manner

What is multitasking in the context of operating systems?

The ability to run multiple tasks concurrently on a single system

The process of managing peripheral devices

The function of controlling user access to resources

The task of organizing files within the system

What is the function of a device driver in an operating system?

To provide a software interface for hardware components

To organize files on the system

What is the main purpose of an operating system's kernel?

To manage system resources and provide essential services to other parts of the operating system

To create a graphical user interface

What is the purpose of virtual memory in an operating system?

To extend the available memory by using disk space as temporary storage

To control user access to resources

To provide a graphical user interface

What is the primary advantage of using incremental backups over full backups?

They require less storage space and time to complete

They offer better data protection

They are easier to manage and restore

They provide a complete copy of all data

In a full backup, what data is backed up?

Files stored in a specific location

Files with specific file extensions

Only the files that have changed

5 Systems software

New Trends in Agriculture Extension approaches Extension has been, and still is, under attack from a wide spectrum of politicians and economists over its cost and financing. As a result, Extension Systems have had to make changes, by restating the system’s mission, developing a new vision for the future, and formulating plans for the necessary transition to achieve the desired change. 1. Privatization of Agricultural Extension Service Privatization: Process of funding and delivering the extension services by private individual or organization is called Private Extension. Concept: Privatization of extension refers to services rendered in rural area & allied aspects of extension personnel working in private agencies or organization for which farmers are expected to pay a fee & it can be viewed as supplementary or alternative to public extension services (Sarvanan & Shivalinge 1980). Privatization approaches ➢ Share cropping system ➢ Village extension contract system ➢ Public extension through private delivery ➢ Service for vouchers Strengths of Private Extension System ➢ More demand - driven rather than supply – driven ➢ High quality of services in terms of satisfying information needs of clientele, trained manpower, sustained finances and resource allocation ➢ Provides for an information mix and choices available to farmers ➢ Enhanced efficiency of staff ➢ Assure continuous supply and quality agricultural products ➢ More effective because farmer can select an adviser who is the best able to help ➢ Healthy competition among service provider will lead to better quality and lower costs for service Weakness of Private Extension System ➢ Concentrate on area having favorable physical environment ➢ More face-to-face contacts (person oriented) ➢ Increased dependence of farmers and hence exploitation ➢ No education role ➢ Deprivation of small farmers ➢ Hamper the free flow of information 2. Cyber Extension or e-extension Concepts Cyber space: it is the imaginary or virtual space of computers connected with each other on Networks, across the Globe. Cyber extension: it means 'using the power of online networks, computer communications and digital interactive multimedia to facilitate dissemination of agriculture technology. Cyber Extension thus can be defined as the extension over cyber space. Important tools of cyber extension E-Mail, Telnet, File Transfer Protocol (FTP), Gopher, Archie and World Wide Web (WWW) Strengths of Cyber Extension ➢ Access to the astounding information and continuously available ➢ Information rich and instantaneously available of information ➢ Interactive communication ➢ The information is available from any point on the globe ➢ Communication is dynamic ➢ Cut steps from traditional process ➢ Save money, time and effort ➢ Multiplicity of purpose Issues and Concerns of Cyber Extension ➢ Lack of Reliable Telecom Infrastructure in Rural Areas ➢ Erratic or no Power Supply ➢ Lack of ICT Trained manpower (willing to serve) in Rural Areas ➢ Lack of content (locally relevant and in local languages) ➢ Lack of Information Services to Rural Clientele ➢ Low Purchasing power of the Rural communities ➢ Lack of Holistic Approaches ➢ Issues of Sustainability Application of cyber extension ➢ Village information shops Dr. M.S. SwaminathanResearch Foundation, Chennai ➢ Information villagers MANAGE in Ranga Reddy District in Andhra pradesh ➢ Gyandoot net initiative of District Dhar, Madhya Pradesh. ➢ Warna wired village of National Informatics Center (NIC) in Kolhapur- Sangli Districts of Maharashtra 3. Market-Led-Extension (MLE) Concepts Market: A congregation of prospective buyers & sellers with a common motive of trading a particular commodity. Extension: It is the spreading/reaching out to the mass Market-led-extension: Agriculture & economics coupled with extension is the perfect blend for reaching at the door steps of common man with the help of technology. Dimensions of market-led extension ➢ Marketing mix: A planned mix of the controllable elements of a product's marketing plan commonly termed as 4Ps: product, price, place, and promotion. These four elements are adjusted until the right combination is found that serves the needs of the product's customers, while generating optimum income. ➢ Marketing plan: A marketing plan is a comprehensive document that outlines a business and marketing efforts for the coming year. It describes business activities involved in accomplishing specific marketing objectives within a set time frame. A marketing plan also includes a description of the current marketing position of a business, a discussion of the target market and a description of the marketing mix that a business will use to achieve their marketing goals. ➢ Market Intelligence: It is the information relevant to a company’s markets, gathered and analyzed specifically for the purpose of accurate and confident decision making. Market intelligence includes the process of gathering data from the company’s external environment, whereas the business intelligence process is primarily based on internal recorded events – such as sales, shipments and purchases. ➢ Market oriented production ➢ Use of Technology Strengths of market-led extension ➢ SWOT analysis of the market ➢ Organization of Farmers’ Interest Groups (FIGs) ➢ Enhancing the interactive and communication skills of the farmers ➢ Establishing marketing and agro-processing linkages ➢ Advice on product planning ➢ Educating the farming community ➢ Direct marketing ➢ Acquiring complete market intelligence ➢ Publication of agricultural market information Production of video films of success stories ➢ Challenges to market-led extension ➢ Gigantic size of extension system ➢ Information technology Diverse conditions ➢ Market intelligence ➢ Reforms in agricultural extension system Government Initiatives ➢ Central warehousing Corporation-1965 ➢ MSP by Commission for Agricultural Cost and Price (CACP) ➢ Food Corporation of India ➢ Then some others as: Cotton Corporation of India (CCI), Jute Corporation of India (JCI), National Dairy Development Board (NDDB), Agriculture and Processed food Export Development Authority (APEDA) etc. 4. Farmer--Led-Extension (FLE) Farmer--led-extension is defined as 'the provision of training by farmers to farmers, often through the creation of a structure of farmer promoters and farmer trainers' (Scarborough et al., 1997). Philosophy and principles ➢ Farmers and local institutions (e.g. producer organizations or village leaders) should play a key role in selecting farmer-trainers and monitoring and evaluating them. This helps make the programmes more accountable to the community or groups that they serve. ➢ Farmer-trainers are ‘of the community’; they communicate in local languages and are more sensitive to local cultures, mannerisms, farming practices, and farmers’ needs. ➢ Farmer-trainers should be selected on the basis of their skills and interest in sharing information, not just on their farming expertise. ➢ Farmer-trainers need strong linkages with and support from development agents (whether government, non-government organization (NGO), or private), the people who train and backstop them. Farmer-trainers generally serve as a complement to existing extension systems, rather than being a substitute for them. ➢ Facilitating organizations and local institutions need to be proactive in ensuring that women as well as men become farmer-trainers. ➢ Simple and appropriate reference materials should be made available to the farmer trainers. Essential Elements of Farmer--led-extension ➢ The group ➢ The Field ➢ The Facilitator ➢ The curriculum ➢ Programme leader ➢ Financing Special features of Farmer--led-extension ➢ All learning is field based & it is primary venue for learning ➢ FLE group learning constantly over the experimentation period ➢ FLE promotes healthy decisions & quality decisions ➢ Farmers conduct their own field studies with comparisons or treatments ➢ Facilitates Farmer-to-Farmer communication ➢ Field staff serve as facilitators ➢ FLE is a unique way to educate farmers ➢ It is an effective platform for sharing of experiences and collectively solving agriculture related problems. 5. Expert system Expert system is an intelligent computer program that uses knowledge and inferences procedures to solve problems (Daniel Hunt, 1986). Objectives of developing expert system ➢ To enhance the performance of agricultural extension personnel and farmer ➢ To make farming more efficient and profitable ➢ To reduce the time required in solving the problems ➢ To maintain the expert system by continuously upgrading the database Advantages of expert system ➢ Solves critical problems by making logical deductions without taking much time ➢ It combines experimental and conventional knowledge with the reasoning skills of specialists ➢ To enhance the performance of average worker to the level of an expert Limitations of expert system ➢ Expensive computer program ➢ Mostly developed not in regional languages ➢ Requires AC power and internet connection all the time ➢ Complex software requires computer skilled personnel Modules of expert system in agriculture ➢ COMAX: Integrated crop management in cotton ➢ SOYEX: Soybean oil extraction expert system ➢ PLANT/ds: Diagnosis of soybean diseases ➢ MAIZE: Maize expert system for field crop management ➢ SEMAGI: Weed control decision making in sunflowers ➢ Rice Crop Doctor: Developed by National Institute of Agricultural Extension Management (MANAGE) Difference between conventional and expert system of extension Conventional Extension ➢ Universal approachability of same information is a problem ➢ Information is given whatever is available without considering needs and resources ➢ No Cost benefit analysis ➢ Information flow depends on availability of agent ➢ Require users to draw their own conclusion from facts Expert System of Extension ➢ Universal approachability of same information is possible ➢ Information is chosen based on their needs and resources ➢ Cost benefit analysis ➢ Information through Cyber Cafe at any place at any time ➢ Conclusion is drawn based on the decision given by the expert

Y11 : Revision: 1.5 System Software

5.1 Personal data Personal data is any data that relates to you and your identity. This includes data such as: •Name •Address •Telephone number •Email address •Bank details •Medical records •Salary •Political opinions You should be very careful about revealing any of your personal data! By revealing personal data to another, especially online, you are exposing yourself to dangers such as identity theft, fraud, bullying and blackmail. These types of dangers can be issues that arise as a result of revealing more personal thoughts and feelings to those that can use them against you. It is a more sinister viewpoint to take, but the moment you reveal any personal data to another, you are providing them with the potential to harm you or your identity. This isn't to say you should never speak to another, especially those unknown online, just understand how to recognise a danger and how to keep your identity secure. To keep yourself safe in your daily life, you are likely to have been taught to take measures such as locking doors, not talking to strangers and not venturing into unsafe areas. However, when many people go online, they relax their safety measures, perhaps because they are in the comfort of their own home, so do not think anything negative will happen. Many people that use the internet are genuine, but knowing how to detect the few that aren't is important. There are several guidelines for you to be aware of to keep your personal data confidential: •Have strong passwords set on any account that holds personal data. Stronger passwords include characters, numbers and symbols and are not a recognisable word. •Encrypt (scramble text so that it cannot be read without a decryption key) any personal data that you store on your computer. •Have a firewall present, scanning incoming and outgoing data from your computer system. •Regularly scan your computer with preventative software, such as an anti-virus package, that is used to identify a virus on a computer and remove it. •Make use of any biometric devices (devices that measures a person's biological data, such as thumbprints), that are built into technology. •Only visit and provide data to websites that are a trusted source. •Do not open any email attachments from a sender you do not recognise. •Check the URL attached to any link requesting data to see if it is genuine. •Be cautious about any pictures or opinions that you post or send to people. •Remove data about your location that is normally attached to your photos and videos that you may post, such as geotags. •Do not become friends on social networking sites with people you do not know. •Set all the privacy controls to the most secure setting that are available on social media accounts. •Report and block any suspicious user. •Use a nickname or pseudonym when using the internet for entertainment, for example, playing games. •If it is possible, use a virtual private network (VPN), an encrypted connection that can be used to send data more securely across a network. The ways in which some of these guidelines can be used in more detail will be explored throughout this chapter.

Inspire Manak Mathematics Project: Teacher: sarasa srinivasa kumar Student: Brundageethika, class 10 AP MODEL SCHOOL, Nandavaram, Marripadu Mandal, Nellore District *Title:* Enhanced Irrigation System for Efficient Water Use in Agriculture *Overview:* This project aims to develop an optimized irrigation system using mathematical principles to efficiently distribute water throughout a farm. By employing geometry, linear programming, and ratios, the system enables farmers to optimize water allocation, enhance crop yield, and reduce water consumption. *Issue Addressed:* Inefficient irrigation methods lead to excessive water consumption and reduced crop productivity. Conventional methods often result in inconsistent water distribution, wasting this precious resource. *Benefits:* - Guarantees efficient water usage, minimizing waste and preserving resources - Potential to reduce water consumption by up to 30% - Enhances crop productivity by ensuring each plant receives the ideal amount of water - Easy to implement and cost-effective for farmers in water-scarce areas - Promotes environmentally responsible agricultural practices - Scalable for various farm sizes and crop types *Required Tools:* 1. *Mathematical Tools:* - Graph paper or software (e.g., GeoGebra) - Calculator or software (e.g., Excel) for linear programming - Ruler and compass for manual layout design 2. *Materials for the Model:* - Cardboard or plywood board for farm layout model - Small containers (e.g., cups, bottles) for simulating water distribution - Plastic tubing or straws for irrigation channels - Clay or soil for crop fields 3. *Water Distribution System:* - Water pump or manual syringe for demonstrating water flow - Small-scale water reservoir (bowl or tank) - Valves or small taps to control water flow 4. *Visualization and Display:* - Markers, pens, and labels for marking crop sections and water flow paths - Charts or posters for showing mathematical calculations and results - Projector or laptop (optional) for digital models 5. *Miscellaneous:* - Adhesive (glue, tape) for assembling the model - Scissors or cutting tools for shaping materials - Measuring tape for accurate model scaling This project has the potential to make a significant impact on agricultural practices, and I'm excited to see how it develops!

Reading Passage: The Anatomy of a Kill Chain In the lexicon of modern warfare, the term "kill chain" describes the end-to-end process of a military attack, from the initial identification of a target to its eventual destruction and the subsequent evaluation of the strike's effectiveness. Conceptually, the kill chain is a structural model used to understand and optimize the speed and precision of military operations. The fundamental principle of this model is that an attack functions as a sequence of interdependent stages; if any single link in the chain is broken, the entire operation fails. For strategic planners, this creates a dual objective: to accelerate one's own kill chain while simultaneously finding ways to disrupt the adversary's. Strategic Concept: The Kinetic Model (F2T2EA) The traditional military kill chain is often summarized by the acronym F2T2EA, representing a continuous cycle of find, fix, track, target, engage, and assess. The kinetic kill chain begins with Find, the reconnaissance phase where intelligence assets identify a potential target within a theater of operations. Once found, the process moves to Fix, which involves pinning down the target's specific location and ensuring it can be distinguished from friendly forces or non-combatants. Track follows, maintaining a persistent watch on the target's movements to prevent its escape. In the Target phase, commanders select the appropriate weapon system and verify the legality and strategic value of the strike. Engage is the kinetic moment—the actual deployment of ordnance against the objective. Finally, Assess involves battle damage assessment (BDA) to determine if the desired effects were achieved or if further engagement is required. This model emphasizes "compressing the sensor-to-shooter timeline," meaning the faster a military can move through these steps, the more lethal it becomes. The Evolution: The Cyber Kill Chain® As warfare expanded into the digital domain, Lockheed Martin adapted the kinetic model into the Cyber Kill Chain. This framework assists defenders in identifying and stopping Advanced Persistent Threats (APTs). Unlike a physical missile, a cyberattack often unfolds over weeks or months, but the sequential logic remains the same. The model consists of seven distinct stages: Stage Description of Attacker Activity 1. Reconnaissance The harvesting of information. Attackers research targets via social media, public records, and technical scanning to find vulnerabilities. 2. Weaponization Coupling a remote access trojan with an exploit into a deliverable payload (e.g., a malicious PDF or Microsoft Office document). 3. Delivery Transmission of the weapon to the target environment. Common vectors include email attachments, malicious websites, or USB drives. 4. Exploitation The weapon triggers. The code executes on the victim's system, typically by taking advantage of a software or operating system vulnerability. 5. Installation The attacker installs a persistent backdoor or malware on the victim's system, allowing them to maintain access even after a reboot. 6. Command & Control (C2) The compromised system opens a communication channel back to the attacker's server, allowing the intruder to give manual instructions. 7. Actions on Objective The final stage where the attacker achieves their goal, such as data exfiltration, encryption for ransom, or destruction of critical infrastructure. Strategic Implications for Defense The strategic value of the Cyber Kill Chain lies in its ability to provide a roadmap for "proactive defense." By understanding the sequence, security professionals can implement controls at every stage. For instance, robust email filtering can break the chain at the Delivery stage, while endpoint detection can stop the Installation phase. Crucially, the earlier a defender breaks the chain, the lower the cost of mitigation and the lower the risk of damage. If an attacker is stopped during Reconnaissance, they have gained nothing. If they are stopped during Actions on Objective, the damage may already be catastrophic. In both kinetic and cyber environments, the goal is the same: to create a "defensive depth" that makes the cost of a successful attack prohibitively high for the adversary.

Question 1 Category: Current Events Question: What was the primary demand of the Kenyan Gen Z protesters featured in the BBC documentary Unmasked: The Truth Behind the Gen Z Protests? Options: A) Free education B) Repeal of the Finance Bill 2024 C) Climate change action D) New elections Correct Answer: B) Repeal of the Finance Bill 2024 Explanation: The BBC documentary highlights that Kenyan youth protested to demand the repeal of the Finance Bill 2024, which proposed tax hikes raising $2.7 billion. Question 2 Category: Science Question: Which gas, discovered on the sun before Earth, is the second most abundant element in the universe? Options: A) Hydrogen B) Oxygen C) Helium D) Nitrogen Correct Answer: C) Helium Explanation: Helium was first detected in the sun’s spectrum in 1868 and is the second most abundant element after hydrogen in the universe. Question 3 Category: Current Events Question: Which Kenyan city was the epicenter of the Gen Z protests covered in the BBC documentary Unmasked: The Truth Behind the Gen Z Protests? Options: A) Mombasa B) Nairobi C) Kisumu D) Eldoret Correct Answer: B) Nairobi Explanation: Nairobi, Kenya’s capital, was the main hub for the #OccupyParliament protests, with significant events like the Parliament breach occurring there, as shown in the documentary. Question 4 Category: History Question: Which empire, known for its vast trade networks, was centered in modern-day Turkey and lasted until the early 20th century? Options: A) Roman Empire B) Ottoman Empire C) Mongol Empire D) Byzantine Empire Correct Answer: B) Ottoman Empire Explanation: The Ottoman Empire, spanning over 600 years until 1922, was a major trade and cultural power centered in modern-day Turkey. Question 5 Category: Current Events Question: According to the BBC documentary, what technology helped document evidence of police brutality during the Kenyan Gen Z protests? Options: A) Drones B) Smartphone videos C) Facial recognition software D) Satellite tracking Correct Answer: B) Smartphone videos Explanation: The documentary used smartphone videos from protesters and bystanders, analyzed via open-source data, to document police brutality during the 2024 protests. Question 6 Category: Geography Question: What is the smallest country in the world by land area? Options: A) Monaco B) Vatican City C) San Marino D) Liechtenstein Correct Answer: B) Vatican City Explanation: Vatican City, with an area of about 44 hectares, is the smallest sovereign state in the world by land area. Question 7 Category: Current Events Question: What hashtag became synonymous with the Kenyan Gen Z protests, as featured in the BBC documentary Unmasked: The Truth Behind the Gen Z Protests? Options: A) #KenyaRising B) #OccupyParliament C) #TaxRevolt D) #GenZFight Correct Answer: B) #OccupyParliament Explanation: The #OccupyParliament hashtag was widely used by protesters to rally against the Finance Bill 2024, as documented by the BBC. Question 8 Category: Entertainment Question: Which actor starred as the lead in the 2023 film Barbie and also played a role in La La Land? Options: A) Emma Stone B) Margot Robbie C) Zendaya D) Saoirse Ronan Correct Answer: B) Margot Robbie Explanation: Margot Robbie starred as Barbie in the 2023 film and played a supporting role in La La Land (2016). Question 9 Category: Sports Question: Which sport is played at the Wimbledon Championships? Options: A) Cricket B) Rugby C) Tennis D) Golf Correct Answer: C) Tennis Explanation: Wimbledon, held annually in London, is the oldest and one of the most prestigious tennis tournaments in the world. Question 10 Category: Technology Question: In web development, what does the acronym “CSS” stand for? Options: A) Computer Style System B) Cascading Style Sheets C) Creative Script Syntax D) Centralized Style Standard Correct Answer: B) Cascading Style Sheets Explanation: CSS (Cascading Style Sheets) is used to style and format the appearance of web pages written in HTML.

How is personal data collected? There are several ways that an unauthorised person can try and collect your data. These include: •phishing •smishing •vishing •pharming. Phishing Phishing is when a person sends a legitimate looking email to a user. The email contains a link to a website that also looks legitimate. The user is encouraged to click the link and to input personal data into a form on the website. The email could also simply ask the user to reply to the email with their personal data. The user is tricked into giving their personal data to a source that they believe is legitimate. However, both the email and the linked website are from a fake unauthorised source. The personal data that is input is then collected by an unauthorised person. This person can then use this data for criminal acts, for example, to commit fraud or steal the person's identity. Intimidation has become a common feature of phishing emails, threatening the user that they must click the link and rectify a situation immediately, or there will be a further issue. The aim of a phishing attack is to steal the user's personal data. Figure 5.1: Phishing. A real-life example of phishing PayPal have been the subject of several different phishing emails. Users receive an email that looks as though it has been sent from PayPal, as it has the PayPal branding. The email normally warns of an issue such as unexpected activity on their account, or that some kind of verification of their account is required. The user is then asked to click a link to log into their account and resolve the issue. The link takes them to a webpage that looks like the PayPal login page. If the user inputs their login details into this page, they will not be taken to their account. It is often at this stage that the user may realise that the email and webpage are fake. However, they have already given the unauthorised person their PayPal login details. Figure 5.2: An example of a phishing email claiming to be from PayPal. How to recognise phishing There are several guidelines to be aware of regarding emails to avoid being subjected to phishing. These include: •Don't even open an email that is not from a sender that you recognise or a trusted source. •Legitimate companies will never ask you for your personal data using email. Be immediately suspicious of any email that requests your personal data. •Legitimate companies will normally address you by your name. Be suspicious of any email that addresses you as ‘Dear Member' or ‘Dear Customer'. •Legitimate companies will send an email that uses their domain name. If you hover your mouse over the sender's name, it will show the email address that the email is sent from. If this does not look legitimate, for example, does not contain the correct domain name, then it is probably fake. For example, if the sender's email is user@paypal1.com rather than user@paypal.com, this is from an incorrect domain name. •Legitimate companies are protective of their professional reputation and thoroughly check any communications. They will make sure that all information given is grammatically and correctly spelt. Be suspicious of any email that contains bad grammar or spelling mistakes. •A link in an email from a legitimate company will also normally contain the domain name of the company. You can sometimes hover over the link, or right click and inspect the link, to see the address of the URL that is attached. If the URL does not contain the domain name, or also contains typical errors such as spelling mistakes, then be suspicious of this. PRACTICAL ACTIVITY 5.02 Ask a friend or a member of your family if they have ever received an email that they believed was a phishing email. Ask them how they identified it was phishing. Ask them if they know all of the given guidelines for identifying phishing emails. Smishing Smishing (or SMS phishing) is a variant of phishing that uses SMS text messages to lure the user into providing their personal details. The user is sent an SMS text message that either contains a link to a website, in the same way that phishing does, or it will ask the user to call a telephone number to resolve an urgent issue. The same advice can be followed for smishing as given for phishing. The user must question at all times any links that are sent from an unknown or suspicious user. It is advisable that if a user believes the message may be legitimate, to type in the domain name for the legitimate company website into their web browser, rather than following the link in the message. Users should block any numbers that they believe are suspicious to prevent any further risk of smishing from that number. Figure 5.3: Smishing. Vishing Vishing (or voice phishing) has the same aim as phishing, to obtain a user's personal details. The user receives a telephone call that could either be an automated system or could be a real person. An automated voice could speak to the user and advise them that an issue has occurred, such as there has been suspicious activity regarding their bank account. The user may then be asked to call another number, or just to simply press a digit and be directed to another automated system. This system will ask them to provide their bank account details to resolve the issue. The bank account details have then been obtained by the unauthorised user and can be used to commit a crime against the user. The automated system could be replaced by a real person who will try to do the same thing. They will try to convince the user that there has been an issue with an account they have and to provide the log-in details or PIN for the account to verify who they are so the issue can be resolved. The precaution to take for vishing is that no company will ever call you and ask you to provide any log-in details or PIN details over the telephone. They may ask you to provide other personal information, and if you are in doubt that the person on the other end of the phone is legitimate, it is always advisable to put the phone down and call the company back on a legitimate number that you may already know or can obtain. Figure 5.4: Vishing. Pharming Pharming is when an unauthorised user installs malicious code on a person's hard drive or server. The malicious code is designed to redirect a user to a fake website when they type in the address of a legitimate one. The fake website is designed to look like the legitimate one, to trick the user and make sure they are not aware that their request has been redirected. The user will then enter their personal details into the fake website, believing it is the legitimate one, and the unauthorised person will now have their personal data. A common technique used in pharming is called domain name server (DNS) cache poisoning. This technique exploits vulnerabilities in the DNS and diverts the internet traffic intended for a legitimate server toward a fake one instead. The unauthorised user needs to find a way to install the malicious code on the computer. They often hide the malicious code in an email attachment or link. When the user opens the email attachment or clicks the link, the malicious code is downloaded also. Figure 5.5: Pharming. The aim of a pharming attack is also to steal a user's personal data. A real-life example of pharming In 2007 50 different companies all over the world were subject to a pharming attack, these included PayPal, eBay, Barclays bank and American Express. Over a three-day period, hackers managed to infect over 1000 PCs a day with a malicious pharming code. When users who had been infected visited the websites of the different companies, they were redirected to a legitimate-looking version of the site that was designed to steal their personal data. The original email, containing the malicious code, was set up to look like a shocking news story. Users were encouraged to click a link in the email to find out more information. The code was downloaded when the user clicked the link. This was quite a sophisticated attack that required legitimate looking websites to be set up for a large number of companies. It is not known how much money the hackers were able to retrieve as a result. How to prevent pharming All of the guidelines to avoid being subjected to phishing are also relevant for recognising pharming. There are also several other precautions that can be taken to check for pharming attacks. These include: •Have a firewall installed and operational. A firewall monitors incoming and outgoing traffic from your computer. It checks this traffic against set criteria and will flag and stop any traffic that does not meet the criteria. A firewall could detect and block suspicious traffic, such as a malicious code trying to enter your system. •Have an anti-virus program installed that is designed to detect malicious pharming code. You need to scan your computer on a regular basis to check for any malicious code. It is advisable to set up an automatic scan on a daily basis at a time when your computer will normally be switched on. •Be aware when using public Wi-Fi connections. A hacker could look to directly access your computer and install the malicious code if you are connected to a public Wi-Fi connection. It is often advisable to use a VPN when using public Wi-Fi. This will help shield your internet activity and personal details from a hacker, making it more difficult for them to access your computer. Smishing can also be used as a form of pharming. A user is sent a link, that when they click is designed to download malware onto their mobile device. Therefore, it is advisable to have security software installed on your mobile and also scan it regularly to detect any presence of malware.

Related quizzes

Related quizzes