Internet security — AQA A-Level Computer Science

Internet security encompasses the theoretical principles, cryptographic protocols, and architectural mechanisms engineered to protect data in transit and networked devices from interception, tampering, and disruption. In AQA A-Level Computer Science, this area bridges computer networks and computational logic, requiring students to master the mathematical foundation of encryption, the role of trusted intermediaries, and multi-layered network defences.

Understanding these security concepts is critical in an era dominated by cloud computing, ubiquitous web transactions, and pervasive cyber threats. Students examine not only how secure communication channels are established using hybrid cryptosystems and digital certificates, but also how vulnerabilities such as malware, social engineering, and distributed attacks compromise modern computing systems.

• →Symmetric vs Asymmetric Encryption: Symmetric uses a single shared secret key for encryption and decryption; asymmetric utilizes mathematically linked public and private key pairs.
• →Digital Signatures and Hashing: A digital signature is produced by encrypting a message hash with the sender's private key, guaranteeing message integrity, authenticity, and non-repudiation.
• →Digital Certificates and CAs: Issued by trusted Certificate Authorities (CAs) to bind an entity's identity to their public key, containing the serial number, expiry date, public key, and CA digital signature.
• →Network Firewalls: Inspect traffic across network perimeters via packet filtering (stateless checks on IP, port, protocol), stateful inspection (monitoring connection state/context), and application proxies.
• →Cyber Threats: Classifications of threats including viruses, worms, trojans, phishing, pharming, and Distributed Denial of Service (DDoS) attacks.

• Describes the key pair being generated before a certificate is requested
• States that a certificate authority verifies the applicant's identity before issuing the certificate
• Explains that the CA signs the certificate with its private key
• Explains that the sender creates a hash of the message and encrypts it with their private key to form the signature
• Explains that the receiver decrypts the signature with the sender's public key and compares hashes to confirm integrity

• 💡Write the obtaining steps and usage steps as separate ordered sequences.
• 💡Name which key is used at each stage: the applicant's private key, the CA's private key, and the sender's public key.
• 💡Include the hash comparison as the final step of verification.
• 💡Always state the ownership and type of key explicitly. Never simply write 'encrypt with the key' — write 'Alice encrypts using Bob's public key'.
• 💡Remember the distinction between confidentiality and authenticity. Encrypting with a recipient's public key achieves confidentiality. Encrypting with a sender's private key achieves authentication/non-repudiation.
• 💡When explaining how digital signatures verify integrity, make sure to detail both sides: generating the hash at the sender end, and generating and matching the hash at the recipient end.

• Confuses the signature's purpose with encryption of the whole message; the signature is a hash encrypted with the private key, and the message itself is not necessarily encrypted. Correct by stating which part is encrypted.
• Says the receiver decrypts the signature with their own private key; the sender's public key is used. Correct by naming the matching key.
• Describes the certificate as a copy of the private key; the certificate contains the public key and identity details. Correct by naming the public key.
• Believing that public keys must be kept private: Public keys are intended for public distribution and can be freely published; only private keys must remain strictly confidential.
• Assuming firewalls detect and remove malware: Firewalls monitor and control network traffic based on transmission rules and port access, but they generally do not scan file contents for viruses or malicious payloads; this is the role of anti-malware software.
• Confusing viruses with worms: A virus requires a host file and human intervention (such as running an infected executable) to replicate, whereas a worm is a standalone self-replicating program that spreads across networks autonomously without user interaction.

1. 1Day 1-2: Master cryptographic fundamentals — compare symmetric and asymmetric encryption, key exchange problems, and computational overheads.
2. 2Day 3-4: Diagram and write out step-by-step procedures for digital signatures, hashing algorithms, and digital certificates issued by CAs.
3. 3Day 5-6: Study network perimeter defences, comparing packet filtering, stateful inspection, and proxy servers.
4. 4Day 7: Review cyber attack vectors (malware types, phishing, pharming, DoS/DDoS) and test knowledge with past AQA paper scenario questions.

• 📋Step-by-step sequence questions: Detail the precise chronological sequence of key usages in SSL/TLS handshakes, digital signature verification, or encrypted email transmission.
• 📋Comparative analysis: Compare symmetric and asymmetric encryption in terms of speed, resource utilisation, key distribution, and typical practical use cases.
• 📋Contextual security evaluation: 6 to 9 mark scenarios evaluating network vulnerability to DDoS, eavesdropping, or man-in-the-middle attacks and recommending technical solutions.