Cybersecurity

[Buela_Vigneswaran]

Cybersecurity

1. Introduction to Cybersecurity

• Definition:
  • The practice of defending computers, servers, mobile devices, and data from malicious attacks.
• Key Objectives (CIA Triad):
  • Confidentiality: Ensuring data is accessed only by authorized individuals.
  • Integrity: Maintaining the accuracy and reliability of data.
  • Availability: Ensuring data and systems are accessible when needed.

Cybersecurity.jpg (8.08 KiB) Viewed 275 times

2. Types of Cyber Threats

• Malware:
  • Malicious software such as viruses, worms, trojans, ransomware, and spyware.
• Phishing:
  • Fraudulent attempts to obtain sensitive information via fake emails or websites.
• DDoS (Distributed Denial of Service):
  • Overloading a server or network to disrupt its services.
• SQL Injection:
  • Attacking a database by injecting malicious SQL queries.
• Man-in-the-Middle (MITM):
  • Intercepting communication between two parties to steal or manipulate data.

 

 

 

3. Cryptography

• Symmetric Encryption:
  • Single key is used for encryption and decryption (e.g., AES, DES).
• Asymmetric Encryption:
  • Uses a public-private key pair (e.g., RSA, ECC).
• Hashing:
  • Irreversible data transformation (e.g., SHA-256, MD5).
• Digital Signatures:
  • Ensuring data authenticity and integrity.

 

4. Network Security

• Firewalls:
  • Filters incoming and outgoing traffic based on rules.
• Intrusion Detection and Prevention Systems (IDPS):
  • Detect and prevent unauthorized access to networks.
• VPNs (Virtual Private Networks):
  • Secure connections over public networks.

5. Ethical Hacking

 

• Penetration Testing:
  • Simulating attacks to identify vulnerabilities in systems.
• Types of Hackers:
  • White Hat: Ethical hackers.
  • Black Hat: Malicious hackers.
  • Gray Hat: Hackers who act without malicious intent but without permission.

6. Security Tools and Techniques

• Antivirus and Anti-malware: Detecting and removing malicious software.
• Password Management: Tools like LastPass, KeePass to manage strong passwords.
• SIEM (Security Information and Event Management): Tools for monitoring and analyzing security events.
• Penetration Testing Tools:
  • Kali Linux, Metasploit, Wireshark, Burp Suite.

7. Emerging Trends in Cybersecurity

• Zero Trust Architecture:
  • Assuming no user or device is trustworthy by default.
• AI and Machine Learning:
  • Leveraged to predict and prevent cyber threats.
• Blockchain Security:
  • Enhancing data security and transparency.
• Cybersecurity in IoT:
  • Securing interconnected devices and networks.