This topic will provide an overview of cyber security, its importance, the types of cyber threats, and the potential risks associated with cyber attacks.
Introduction to Cyber Security – Study Notes
| Concept | Description | Typical Controls |
|---|---|---|
| Confidentiality | Prevents unauthorized disclosure of data. | Encryption, access controls, VPNs |
| Integrity | Guarantees that data is accurate and unaltered. | Checksums, digital signatures, version control |
| Availability | Ensures that systems and data are accessible when needed. | Redundancy, load balancing, DDoS mitigation |
| Authentication | Verifies the identity of a user or device. | Passwords, biometrics, multi‑factor authentication (MFA) |
| Authorization | Determines what an authenticated entity is allowed to do. | Role‑based access control (RBAC), policy engines |
| Non‑repudiation | Prevents denial of actions performed. | Audit logs, digital signatures |
| Threat Type | Example | Impact |
|---|---|---|
| Malware | Viruses, ransomware, trojans | Data loss, system disruption |
| Phishing | Deceptive emails, fake login pages | Credential theft |
| Man‑in‑the‑Middle (MitM) | Intercepted network traffic | Data interception, session hijacking |
| Denial‑of‑Service (DoS/DDoS) | Flooded servers | Service outage |
| Insider Threats | Disgruntled employee, accidental leak | Data breach, sabotage |
| Zero‑Day Exploits | Unpatched software vulnerabilities | Remote code execution, privilege escalation |
Network Security
Endpoint Security
Application Security
Identity & Access Management (IAM)
Data Security
Cloud Security
Operational Security (OpSec)
| Framework / Standard | Primary Focus | Typical Use |
|---|---|---|
| ISO/IEC 27001 | Information security management system (ISMS) | Enterprise‑wide governance |
| NIST Cybersecurity Framework (CSF) | Identify‑Protect‑Detect‑Respond‑Recover | U.S. federal & private sector |
| CIS Controls | Prioritized set of best practices | Quick‑start hardening |