5.6 Safe Computing
IOC-2 — threats, defenses, and encryption
5.6 Safe Computing
Knowing what PII is (from 5.5) is only half the picture. Now we look at how it gets stolen, how systems get compromised, and how to defend against it — all part of College Board's IOC-2 standards.
IOC-2.C — how attackers get in
IOC-2.B — defense in depth
Good security is layered — if one fails, the next holds. Click each layer to expand.
IOC-2.B.5 — encryption types
One shared key handles both encryption and decryption. Fast and efficient, but both parties must securely share the key beforehand.
A public key encrypts, a private key decrypts. Anyone can encrypt a message for you — only you can read it with your private key.
Certificate authorities (CAs)
CAs issue digital certificates that prove a public key genuinely belongs to who claims to own it. This trust model is what makes HTTPS work — your browser checks the certificate before trusting the connection.
5 questions — click to reveal