Cambridge IGCSE0478

The internet and the world wide web

Computer Science 0478 Chapter Notes

What this chapter covers

The internet and the world wide webDigital currencyCyber security
ShareWhatsAppPost
The internet and the world wide web notes

Unable to load PDF

The notes viewer could not load. Please refresh the page.

Read online free. Download a watermarked copy with a free account.

Read the notes

The full The internet and the world wide web notes as text: skim, search, and jump between subtopics.

~14 min read

1. The Internet vs. The World Wide Web

Although often used interchangeably, the internet and the World Wide Web (WWW) are two distinct concepts. The internet is the physical infrastructure – a massive, global network of interconnected computers, servers, routers, and cables. Think of it as the roads and motorways. It's a Wide Area Network (WAN) that allows devices all over the world to connect and communicate with each other. The World Wide Web, on the other hand, is the collection of information, websites, and web pages that is accessed using the internet. The Web is a service that runs on the internet. If the internet is the road system, the Web is all the shops, houses, and destinations you can visit by travelling on those roads.

Key term

Internet: A global wide area network (WAN) that connects computer systems across the world, providing the infrastructure for services like the World Wide Web and email.

Common pitfall

Stating that the internet and the World Wide Web are the same thing. They are fundamentally different, with the Web being a service that uses the internet.

Fun fact

The World Wide Web was invented by computer scientist Tim Berners-Lee in 1989 while he was working at CERN. He wanted an easier way to share information between different computers.

Worked example 12 marks

Explain the difference between the internet and the World Wide Web. [2]

  1. 1

    The internet is the global network of hardware, such as cables and servers, that connects millions of computers together. [1 mark]

  2. 2

    The World Wide Web is the collection of websites and web pages that are accessed using the internet infrastructure. [1 mark]

Recap

  • The internet is the physical infrastructure of a global network.
  • The World Wide Web (WWW) is a service that runs on the internet.
  • The internet is a Wide Area Network (WAN).
  • The WWW is the collection of all public websites and web pages.
  • You use the internet to access the World Wide Web.

Quick check

  1. What is the name for the physical infrastructure of cables, routers, and servers that spans the globe?1 mark
  2. What is the collective term for all the websites and web pages available online?1 mark

2. How the Web Works: URL, DNS, and Protocols

Accessing a web page involves a seamless, multi-step process. It starts when you type a Uniform Resource Locator (URL) into your web browser. A URL is a unique, text-based address for a web page. It has three parts: the protocol (e.g., 'https'), the domain name (e.g., 'www.cambridge.org'), and the file path/name (e.g., '/education/').

  1. The browser sends the domain name to a Domain Name Server (DNS). The DNS is like the internet's phonebook; it looks up the human-friendly domain name to find the corresponding machine-readable IP address (e.g., 192.0.2.146).
  2. The DNS returns the IP address to the browser.
  3. The browser then sends a request to the web server located at that IP address. This request uses a specific protocol, which is a set of rules for communication. The most common are HTTP (Hypertext Transfer Protocol) and HTTPS (Hypertext Transfer Protocol Secure). HTTPS is the secure version; it encrypts the data between your browser and the server, making it unreadable to anyone who might intercept it.
  4. The web server receives the request, finds the requested web page files (written in languages like HTML and CSS), and sends them back to your browser.
  5. Finally, your browser receives the files and renders them, displaying the web page on your screen.

Key term

DNS (Domain Name Server): A server that translates human-readable domain names (like www.google.com) into machine-readable IP addresses (like 142.250.187.228).

Examiner insight

Examiners look for a clear, sequential description of the web page retrieval process, with the correct role assigned to the browser, DNS, and web server.

Fun fact

There are only 13 'root' DNS servers in the world that form the backbone of the entire Domain Name System. However, there are hundreds of physical copies of these servers distributed globally for speed and reliability.

Worked example 14 marks

A user types the URL 'https://www.example.com/login.html' into their browser. Describe the roles of the DNS and the web server in displaying this page. [4]

  1. 1

    The browser sends the domain name 'www.example.com' to a DNS. [1 mark]

  2. 2

    The DNS looks up the domain name and finds its corresponding IP address, which it sends back to the browser. [1 mark]

  3. 3

    The browser sends an HTTPS request to the web server at the found IP address for the page 'login.html'. [1 mark]

  4. 4

    The web server locates the 'login.html' file and sends its content back to the browser to be displayed. [1 mark]

Worked example 22 marks

Explain one reason why using HTTPS is important when accessing a banking website. [2]

  1. 1

    HTTPS encrypts the data transmitted between the user's browser and the bank's web server. [1 mark]

  2. 2

    This means that if a hacker intercepts the data, they cannot read sensitive information like passwords or account numbers, preventing theft. [1 mark]

Recap

  • A URL consists of a protocol, domain name, and file path.
  • A DNS translates domain names into IP addresses.
  • A web browser requests pages from a web server using the IP address.
  • HTTP is the standard protocol for transferring web page data.
  • HTTPS is the secure, encrypted version of HTTP.
  • A web server stores website files and sends them to browsers upon request.

Quick check

  1. What are the three main components of a URL?3 marks
  2. What is the main difference between HTTP and HTTPS?1 mark

3. Web Browsers and Tracking with Cookies

A web browser is a software application whose primary purpose is to retrieve web page files (like HTML, CSS, and JavaScript) from a web server and render them into a visual, interactive page for the user. However, modern browsers have many other functions, including:

  • Keeping a history of visited websites.
  • Storing bookmarks or favourites for quick access.
  • Managing downloads.
  • Caching data to load previously visited pages faster.
  • Storing cookies.

A cookie is a small text file that a website stores on your computer. Its purpose is to remember information about you. This could be your login status, items in your shopping cart, or your preferences (like language or theme). There are two main types:

  • Session Cookies: These are temporary and are stored only for the duration of your browsing session. They are deleted automatically when you close your browser. They are perfect for tasks like keeping you logged in or managing a shopping cart as you move from page to page.
  • Persistent Cookies: These are stored on your computer for a longer period and have an expiry date. They remain even after you close your browser. They are used to remember your preferences and login details between visits, and also for tracking your browsing habits across different websites for advertising purposes.

Key term

Cookie: A small piece of data sent from a website and stored on the user's computer by the web browser to remember stateful information.

Examiner insight

When asked about cookies, clearly distinguishing between the lifespan and a typical use case for both session and persistent cookies is essential for scoring full marks.

Fun fact

The name 'cookie' was coined by web programmer Lou Montulli. It comes from the term 'magic cookie', a packet of data a program receives and sends back unchanged, used in Unix programming.

Worked example 12 marks

Identify two functions of a web browser, other than rendering HTML to display a web page. [2]

  1. 1

    Storing a history of websites the user has visited. [1 mark]

  2. 2

    Storing cookies to remember user preferences or login information. [1 mark]

Worked example 22 marks

An online store needs to remember the items a user has added to their shopping cart as they browse the site, but forget them once the user leaves. State which type of cookie should be used and justify your choice. [2]

  1. 1

    A session cookie should be used. [1 mark]

  2. 2

    This is because it is temporary and will be deleted when the browser is closed, which matches the requirement to only remember the cart during the current visit. [1 mark]

Recap

  • A web browser's main job is to render HTML, CSS and JavaScript.
  • Other browser functions include storing history, bookmarks, and cookies.
  • A cookie is a small text file used by websites to store user data.
  • Session cookies are temporary and are deleted when the browser closes.
  • Persistent cookies are long-term and are stored until their expiry date.

Quick check

  1. What is the name for a cookie that is deleted when the user closes their web browser?1 mark
  2. State one purpose of using cookies on a website.1 mark

4. Digital Currencies and Blockchain

A digital currency is any currency that exists only in digital or electronic form, not in physical form like banknotes or coins. While this includes money in your bank account, the term is now commonly associated with cryptocurrency.

A cryptocurrency (e.g., Bitcoin, Ethereum) is a decentralised digital currency secured by cryptography. 'Decentralised' means it is not controlled by any single entity like a government or central bank. This is made possible by a technology called blockchain.

Blockchain is a distributed, immutable digital ledger. Let's break that down:

  • Ledger: It's a record book of all transactions.
  • Digital: The ledger is a computer file.
  • Distributed: Instead of one person or company holding the ledger, an identical copy is held by thousands of computers across the network. This makes it highly resilient and transparent.
  • Immutable: Transactions are grouped into 'blocks'. Each new block is cryptographically linked to the previous one, forming a 'chain'. Once a block is added to the chain, it is extremely difficult to alter or delete it without the rest of the network noticing. This makes the transaction history secure and trustworthy.

Key term

Blockchain: A decentralised, distributed, and immutable digital ledger used to record transactions across many computers so that the record cannot be altered retroactively.

Fun fact

In 2010, a developer bought two pizzas for 10,000 Bitcoins. This is widely considered the first real-world transaction using cryptocurrency. At Bitcoin's peak price, those pizzas would have been worth over $600 million.

Worked example 12 marks

Explain one benefit of using a distributed ledger like blockchain for a digital currency. [2]

  1. 1

    Because the ledger is distributed across many computers, there is no single point of failure. If one computer goes down, the network continues to operate. [1 mark]

  2. 2

    This also makes it very difficult for a hacker to corrupt the ledger, as they would need to attack thousands of computers simultaneously, making it highly secure. [1 mark]

Recap

  • A digital currency is a currency that only exists in electronic form.
  • Cryptocurrency is a decentralised digital currency secured by cryptography.
  • Blockchain is the technology that underpins most cryptocurrencies.
  • A blockchain is a distributed and immutable digital ledger of transactions.
  • The distributed nature of blockchain makes it secure and removes the need for a central authority like a bank.

Quick check

  1. What does it mean for a cryptocurrency to be 'decentralised'?1 mark
  2. What is the name of the technology used as a distributed ledger for cryptocurrencies?1 mark

5. Understanding Cyber Security Threats

Cyber security threats are malicious acts that seek to damage data, steal data, or disrupt digital life. Key threats include:

  • Malware: Short for 'malicious software', this is a broad term for any software designed to cause harm. Examples include viruses, worms, spyware, and ransomware.
  • Phishing: A fraudulent attempt to trick a user into revealing sensitive information (like passwords or credit card details) by disguising as a trustworthy entity in an email or message.
  • Pharming: A more technical attack where a user is redirected to a fraudulent website without their knowledge, even if they type the correct URL. This is often done by compromising a DNS server.
  • Brute-force Attack: An attempt to crack a password or username by trial and error, systematically trying every possible combination.
  • Data Interception: The act of illegally listening to or stealing data as it is transmitted over a network. This is why unencrypted Wi-Fi is risky.
  • Social Engineering: The art of manipulating people into giving up confidential information. Phishing is a type of social engineering, but it can also happen via phone calls or in person.
  • Hacking: The act of gaining unauthorised access to a computer system or network.
  • Denial of Service (DoS) Attack: An attempt to make a machine or network resource unavailable to its intended users, typically by flooding the target with a huge volume of traffic. A Distributed Denial of Service (DDoS) attack uses a 'botnet' (a network of many compromised computers) to generate the traffic, making it much harder to stop.

Key term

Phishing: A fraudulent attempt to obtain sensitive information such as usernames, passwords, and credit card details by disguising as a trustworthy entity in an electronic communication.

Examiner insight

Examiners expect precise definitions for each threat. For example, for DDoS, you must mention that the traffic comes from multiple sources (distributed).

Fun fact

The first computer worm, the 'Morris Worm', was created in 1988 by a student as an experiment. It spread so fast it accidentally crashed about 10% of the computers connected to the internet at the time.

Worked example 13 marks

A user receives an email that appears to be from their bank. It states their account has been compromised and they must click a link immediately to reset their password. The link leads to a website that looks identical to the bank's site. Identify and describe this security threat. [3]

  1. 1

    The threat is phishing. [1 mark]

  2. 2

    It is an attempt to trick the user into revealing their sensitive information (their password). [1 mark]

  3. 3

    This is done by sending a fraudulent email that impersonates a trusted entity (the bank) and creates a sense of urgency. [1 mark]

Recap

  • Malware is software designed to harm a computer system.
  • Phishing uses fake emails or messages to trick users into revealing data.
  • A brute-force attack tries every possible password combination.
  • Data interception involves stealing data as it travels across a network.
  • A DDoS attack floods a server with traffic from many sources to take it offline.

Quick check

  1. What is the difference between phishing and pharming?2 marks
  2. What type of malware encrypts a user's files and demands a payment for their release?1 mark

6. Essential Cyber Security Defences

To protect against cyber threats, a range of security solutions can be used. This is often called 'defence in depth', as no single solution is perfect.

  • Authentication: This is the process of verifying you are who you say you are. Strong passwords are a first step, but better methods include two-factor authentication (2FA), which requires a second piece of information (like a code from your phone), and biometrics (using a unique physical trait like a fingerprint or face scan).
  • Anti-malware Software: This software is designed to detect, prevent, and remove malicious software from your computer. It's vital to keep it updated to protect against new threats.
  • Firewall: A firewall acts as a barrier between a trusted network (like your home network) and an untrusted network (like the internet). It monitors and filters incoming and outgoing traffic based on a set of security rules, blocking suspicious connections.
  • Encryption: This is the process of scrambling data into an unreadable format (ciphertext). Only someone with the correct key can decrypt it back into its original form (plaintext). Encryption protects data both when it is stored (e.g., on your hard drive) and when it is transmitted (e.g., using HTTPS).
  • Proxy Server: A proxy server acts as an intermediary between a user and the internet. It can be used to filter web content, hide the user's real IP address for anonymity, and cache frequently accessed pages to speed up browsing.

Key term

Authentication: The process of verifying the identity of a user or process to allow access to a system, network, or device.

Examiner insight

For higher marks, it's good practice to link a specific security solution to the specific threat it helps prevent (e.g., 'HTTPS uses encryption to prevent data interception').

Worked example 14 marks

A school wants to protect its network from external attacks and prevent students from accessing malicious websites. Recommend and describe two security solutions the school could implement. [4]

  1. 1

    Recommendation 1: A firewall. [1 mark] Description: This would monitor traffic between the school network and the internet, blocking any unauthorised access attempts or malicious data packets. [1 mark]

  2. 2

    Recommendation 2: A proxy server. [1 mark] Description: This could be configured to filter web requests, blocking access to a list of known malicious or inappropriate websites. [1 mark]

Recap

  • Authentication verifies a user's identity using passwords, 2FA, or biometrics.
  • A firewall filters network traffic to block malicious connections.
  • Encryption scrambles data to make it unreadable without the correct key.
  • Anti-malware software detects and removes malicious programs.
  • A proxy server can be used to filter content and hide a user's IP address.

Quick check

  1. What is the purpose of a firewall?1 mark
  2. Give an example of two-factor authentication.1 mark

End-of-chapter exercise

Test yourself on the whole chapter. Work through these before moving on.

  1. State the full name for the acronym WWW and give a one-sentence definition. [2]2 marks
  2. Identify the protocol and the domain name in the following URL: http://www.computerscience.org/revision/notes.html [2]2 marks
  3. Explain the difference between HTTP and HTTPS, with reference to data security. [3]3 marks
  4. Describe the role of a Domain Name Server (DNS) in the process of a user accessing a website. [3]3 marks
  5. A website that sells concert tickets wants to remember a user's login details for 30 days, even if they close their browser. Explain which type of cookie should be used and why. [3]3 marks
  6. Describe a brute-force attack and state one method to make an account more resistant to it. [3]3 marks
  7. Explain two reasons why using blockchain technology can make a digital currency more secure than a traditional, centralised system. [4]4 marks
  8. A small business is setting up a new office network. Describe two different security measures they should implement to protect their data from external threats. [4]4 marks
  9. A user receives a text message with a link, claiming they have won a prize. It asks them to enter their name, address, and bank details to claim it. Identify this security threat and state two actions the user should take. [3]3 marks
  10. A large online retailer is worried about a Distributed Denial of Service (DDoS) attack. Describe how a DDoS attack is carried out and suggest one technical measure to help mitigate its effects. [4]4 marks

Go deeper

Practise and revise with member-only material for this chapter.

Free notes are just the start.

Unlock every Workbook and Chapter at a Glance, and generate your own worksheets and predicted papers.

Explore plans

Related chapters