Cyber Security

Core Concepts

• Information Security: The broader practice of protecting information assets, including confidentiality (keeping information secret), integrity (ensuring information accuracy and completeness), and availability (ensuring authorized access to information).
• Cybersecurity: A specialized field within information security focused on protecting information systems, networks, and devices from unauthorized access, use, disclosure, disruption, modification, or destruction.
• Cyber Threats: Malicious actors or actions that aim to exploit vulnerabilities in computer systems to steal data, disrupt operations, or cause harm. Examples include malware, hacking attacks, phishing scams, and ransomware.
• Vulnerability: A weakness or flaw in a computer system, network, or software that can be exploited by cyber attackers.
• Cybersecurity Risk: The potential for harm resulting from a cyber threat exploiting a vulnerability.

Types of Cyber Threats

• Malware: Malicious software designed to harm a computer system, such as viruses, worms, Trojans, spyware, and ransomware.
• Hacking: The unauthorized access to a computer system or network to steal data, disrupt operations, or install malware.
• Phishing: Deceptive emails or messages designed to trick recipients into revealing personal information or clicking on malicious links.
• Social Engineering: The manipulation of people to gain access to confidential information or systems.
• Denial-of-Service (DoS) Attacks: Overwhelming a website or server with traffic to make it unavailable to legitimate users.
• Zero-Day Attacks: Exploits targeting vulnerabilities in software for which there is no known patch or fix.

Cybersecurity Best Practices

• Implement Strong Passwords: Use complex passwords with uppercase and lowercase letters, numbers, and symbols. Avoid using the same password for multiple accounts.
• Enable Multi-Factor Authentication (MFA): Add an extra layer of security to your accounts by requiring a second verification step, such as a code from your phone, and your password.
• Keep Software Up to Date: Regularly install software updates, including operating system patches and security fixes, to address known vulnerabilities.
• Beware of Phishing Scams: Be cautious about emails and messages from unknown senders, especially those requesting personal information or urging you to click on links.
• Be Wary of Free Downloads: Only download software from trusted sources to avoid malware installation.
• Use a Firewall: A firewall acts as a barrier between your device and the internet, filtering incoming and outgoing traffic to block unauthorized access.
• Backup Your Data: Regularly back up your important data to a secure location in case of a cyberattack or system failure.
• Educate Yourself: Stay informed about the latest cyber threats and best practices by reading news articles and attending training sessions.

Cyber Security Actors

• White Hats: Ethical hackers who use their skills to identify system vulnerabilities and help organizations improve their security posture.
• Black Hats: Malicious hackers who exploit vulnerabilities for personal gain or to cause harm.
• Gray Hats: Hackers who operate in a legal grey area, sometimes finding vulnerabilities and disclosing them responsibly, but other times exploiting them for personal gain.

Cybersecurity Legislation

The Importance of Cyber Security

• Personal Information: Social security numbers, credit card details, and other sensitive data.
• Financial Assets: Banking information and online accounts.
• Critical Infrastructure: Power grids, transportation systems, and communication networks.