In IB Computer Science, students are often asked to analyse security scenarios and identify what could go wrong and why it could go wrong. This requires a clear understanding of the difference between cybersecurity threats and vulnerabilities. Although the terms are related, they refer to different parts of a security problem.
IB examiners expect students to clearly distinguish between potential danger and system weakness.
What Is a Cybersecurity Threat?
A cybersecurity threat is a potential cause of harm to a system.
Threats describe:
- Who or what could attack a system
- The type of damage that could occur
Examples of threats include:
- Hackers
- Malware
- Phishing attacks
- Denial of service attacks
In IB terms, a threat represents intent or capability to cause harm, not the weakness itself.
What Is a Vulnerability?
A vulnerability is a weakness in a system that can be exploited by a threat.
Vulnerabilities may exist in:
- Software
- Hardware
- Network configuration
- User behaviour
Examples include:
- Weak passwords
- Outdated software
- Unpatched systems
