Protecting Systems: Firewalls, Anti-virus, Encryption and Updates

Hello students, welcome to Kwickprep. Your school has a gate, a guard, locked cupboards and regular repairs. A computer needs the same kind of protection. Today we will learn four tools that protect systems: firewalls, anti-virus software, encryption and updates.

No single tool is enough, so we use layers, one on top of another. A firewall controls the traffic that enters and leaves a computer or network. Anti-virus software finds and removes malware, which means harmful software. Updates fix weak points that attackers could use. Encryption scrambles data, so only the right person can read it.

Think of a firewall as the security guard at the school gate. A firewall sits between your computer or school network and the internet. Data travels in small pieces called packets, and the firewall checks each packet against a list of rules. Traffic that matches the rules is allowed, and everything else is blocked. A firewall can be a separate hardware box, a software program on the computer, or both.

Let us watch the gate at work. A packet of data arrives at the firewall. The firewall reads where it came from, and which port, or door number, it wants to use. It asks, do the rules allow this? If yes, the packet goes through the gate. If no, the flow goes down and the packet is blocked. The firewall also records the blocked packet in a log, so an administrator can check it later.

A firewall rule looks at simple facts about each packet. It can check the source IP address, which is the address of the sender, and block a known bad sender. It can check the port number, and allow port four four three, used for secure websites. It can check the direction, and block an unknown app that tries to send data out. It can also check which program is asking, and allow a trusted browser.

Next, anti-virus software. It scans files, downloads and USB drives that you plug in. The main method is a signature check, where each file is compared with patterns of known malware, like matching fingerprints. A newer method is a behaviour check, which spots a program acting suspiciously, such as locking many files at once. When it finds a threat, it moves the file to quarantine, a safe locked area, or deletes it.

Anti-virus is only as good as its latest list. New malware appears every day, so an old list cannot recognise it. That is why the signature list must be updated often, usually automatically. Run a full scan regularly, not just quick scans. Windows already includes Microsoft Defender, so you do not need to buy anything to start.

Why does your phone keep asking you to update? Software has mistakes, and some mistakes leave a weak point called a vulnerability. Attackers look for these weak points to break into systems. A patch is an update that closes the gap. So turn on automatic updates for the operating system, the browser and every app.

Now encryption, which protects data even if someone steals it. Plaintext is normal, readable data, like the message hello. A key is the secret value used to lock and unlock the data. Encryption uses the key to turn plaintext into ciphertext, which looks like random nonsense. Decryption uses a key to turn the ciphertext back into plaintext.

In symmetric encryption, the same key locks and unlocks the data. Riya encrypts her message with a secret key that she shares with Aman. The ciphertext travels over the internet, and anyone who catches it sees only nonsense. Aman decrypts it with the very same key. It is fast, and AES is a common example, but the problem is sharing that key safely in the first place.

Asymmetric encryption solves the key sharing problem by using a pair of keys. Aman has a public key, which he can give to everyone, and anyone can use it to encrypt a message for him. He also has a private key, which never leaves him, and only this key can decrypt that message. It is like a letter box: anyone can drop a letter in, but only the owner has the key to open it. RSA is a common example.

Here is the comparison board exams love. Symmetric uses one shared key, while asymmetric uses a public and private key pair. Symmetric is faster, and asymmetric is slower. Sharing a symmetric key safely is risky, while the public key can be shared openly. A common symmetric example is AES, and a common asymmetric example is RSA.

Now, secure websites. HTTP is the protocol, or set of rules, that browsers use, and it sends data as plain readable text. HTTPS is HTTP made secure, because the data is encrypted. The first security protocol for this was SSL, which stands for Secure Sockets Layer, and today its newer version, TLS, is used instead. People still say SSL certificate out of habit, so both names appear in textbooks.

Here is what happens when you open a secure site. You type an address that starts with https. The website sends its digital certificate, which proves its identity and carries its public key. The browser checks, is this certificate valid and issued by a trusted authority? If yes, both sides agree a shared key using asymmetric encryption, then use fast symmetric encryption, and the padlock appears. If no, the browser shows a warning page.

Four habits will keep you safe. Look for https and the padlock before you log in or pay. Never click past a certificate warning. Remember, the padlock means the connection is encrypted, not that the site is honest, because fake sites can also get certificates. And never type an OTP or card number on a plain HTTP page. Pause and predict: a site shows a padlock but asks for your bank PIN by email link, is it safe? No, the padlock does not prove the site is genuine.

Let us revise what we learned today. A firewall is a gate that checks every packet against rules. Anti-virus scans for malware and must be kept updated. Software updates patch the weak points attackers use. Symmetric encryption uses one shared key, and asymmetric uses a public and private key pair. HTTPS protects websites using TLS, the successor of SSL.