Updates, Checking Emails & URLs, Firewalls

Syllabus & Goals 3 min

Cambridge 5.3 · Keeping data safe — updates, checking communications, firewalls Paper 1 · Computer Systems

By the end of this lesson you can:

1. Explain why automatic software updates improve security, and their one drawback.
2. Check an email's spelling, tone, sender address and URL links to spot a scam.
3. Describe what a firewall does, and what it cannot prevent.

Textbook: Chapter 5, §5.3.2 — Automatic software updates to firewalls (pp. 204–208)

Recap / Warm-Up 5 min

Last lesson: access levels, anti-malware and authentication. Today adds three more defences. Recall Lesson 7: phishing needs the user to act, so spotting a fake email is itself a defence.

Quick starter

Your phone says "Update available: security fixes". Give one reason to install it tonight rather than next month.

Key Concept 14 min

1 · Automatic software updates

Automatic software updates keep the software on computers, phones and tablets up to date without the user remembering to do it. They often run overnight or when the user logs off.

They matter because an update may contain a patch that:

• fixes security weaknesses, protecting against malware; or
• improves performance — removing bugs and adding new features.

The one downside: an update can occasionally disrupt the device. The user then waits for another patch, or rolls the system back to a point before the update (Unit 4).

2 · Checking the spelling, tone and links in communications

Before opening an email or clicking any of its links, check three things: the spelling, the tone, and the links. Genuine organisations do not send emails full of spelling or grammar errors. A tone that rushes you, or feels wrong, suggests phishing. Five things to look for:

1. The sender's address. The part after the @ should match the company's real domain. A free email service or an odd domain is a warning sign.
2. Tone and spelling. Urgency, threats and poor grammar are clear clues.
3. Misspelt domain names in links, e.g. www.bankk-online.com. Criminals register names close to real ones — this is typo squatting.
4. Suspicious links. Hover over a link to see its real destination. It should match the company in the email.
5. Other errors in the address: http instead of https for a site that takes payments, or an unexpected domain type.

3 · Firewalls

A firewall can be software or hardware. It sits between the user's computer (or internal network) and an external network such as the internet. It filters information in and out. It is the primary defence against hacking, malware, phishing and pharming.

The main tasks of a firewall:

• Examine the traffic between the user's computer (or internal network) and a public network.
• Check whether incoming and outgoing data meets a set of criteria (rules).
• Block traffic that fails, and warn the user or network manager.
• Log all incoming and outgoing traffic for later checking.
• Prevent access to undesirable websites, keeping a list of blocked IP addresses.
• Help prevent viruses or hackers entering the computer or network.
• Warn the user if software on their system tries to access an external source, and let them allow or deny it.

What a firewall cannot prevent:

• People inside the network using their own devices (e.g. a phone or modem) to bypass it.
• Employee misconduct or carelessness, such as sharing passwords.
• Users on stand-alone computers disabling it.

These need management control, or personal self-discipline on a home computer.

Worked Example 12 min

(a) Inspect a suspicious email

(CloudBox is a made-up company whose real site is https://www.cloudbox.com.)

1. Sender address: the domain after @ is cloudbox-alerts-24.net, not cloudbox.com. a genuine company emails from its own domain.
2. Greeting: "Dear Valued Customer" — generic. a real account email would use your name.
3. Spelling and grammar: "acount", "We has", "you're account". professional organisations check their emails.
4. Tone: "URGENT!!" and "within 24 hours". rushing the reader stops them thinking — the fear tactic from Lesson 7.
5. Link: hovering shows cloudbx-verify.com — a misspelt domain (typo squatting) — and http, not https. the destination must match the real company, and a log-in page should be secure.
6. Verdict: a phishing email. Do not click; delete it or report it; if worried, type the real address yourself. a full answer ends with the correct action.

(b) Firewall true or false?

Try It Yourself 12 min

📝 Exam Practice 10 min

Recap & Key Terms 3 min

Automatic updates install security patches without relying on memory. Checking spelling, tone, the sender and links exposes phishing and typo squatting. A firewall filters traffic both ways against rules, but cannot stop people bypassing or disabling it.

Patch

An update for software developed to improve it and/or remove bugs.

Typo squatting

Using subtle spelling errors in website addresses to trick users into visiting fake websites.

Firewall

Software or hardware between a computer and an external network that monitors and filters all incoming and outgoing traffic.

Automatic software update

Updates downloaded and installed without user action, keeping software secure and up to date.

Homework 1 min

Task (≤ 15 min): write a short guide for a younger student called "Five checks before you click", based on this lesson. Then answer: "Describe what is meant by typo squatting and how a user can protect themselves from it." [3]