Introduction to Cybersecurity: lesson 1
Key points:
Define Cybersecurity
Openness
Client-server Relationship
Authorization
Discretionary Access control
Non-repudiation
Public key architecture
NIST Cybersecurity Framework
Discussion/ Notes:
What is cybersecurity? Cybersecurity is the practice of protecting systems, networks,
and programs from digital attacks. These cyberattacks are usually aimed at accessing,
changing, or destroying sensitive information; extorting money from users via
ransomware; or interrupting normal business processes.
The term "openness" in the context of cybersecurity refers to the vulnerability of digital
devices to potential attackers. It signifies that all interactions on any digital device
provide a vector or path for potential attackers due to the inherent accessibility of the
Internet. This vulnerability is a fundamental concern in cybersecurity.
In the context of cybersecurity, what is the primary objective of an attacker when
targeting the Authentication process? The primary objective of an attacker when
targeting the Authentication process in cybersecurity is to gain unauthorized access by
assuming a legitimate identity. Attackers use techniques such as masquerading or
spoofing to impersonate someone who has legitimate access credentials. This allows
them to bypass security measures and gain entry to the network or system.
Client-server Relationship: The flow of information from your computer to the destination
What type of attack involves an attacker intercepting and eavesdropping on
communications to compromise Confidentiality?
, An interception and eavesdropping attack is aimed at compromising Confidentiality in
cybersecurity. In this type of attack, the attacker intercepts and eavesdrops on
communication to gain unauthorized access to sensitive information. The goal is to read
and capture data during transmission, potentially exposing it to unauthorized parties.
Authorization: The concept of authorization is that step that occurs after the
authentication and is the right or permission to access a resource. The most common
method of identifying the user is by issuing a token. In UNIX and Linux we refer to this
as the UID or user identifier. Then in Windows, we refer to that token as the SID or
security identifier.
Discretionary Access control: Segregate users according to role, privileges. To include
superusers that could use elevated privileges as required
Non-repudiation: Non-Repudiation is the component of the security model that ensures
that the sender cannot deny sending a message, and the recipient cannot deny having
received it. It provides a declaration and guarantee of the authenticity of the message's
origin and receipt, making it difficult for either party to deny their involvement in the
communication.
Public key architecture: This is the concept that was created to trace the origin of
ownership of data and the implementation of a public key architecture. The problem is,
what is the state of the machine or the device that the keys are being used in? You
cannot guarantee this in my and other opinions. Let me ask you a question.
NIST Cybersecurity Framework
- Identify
- Protect
- Detect
- Respond
- Recover
Summary:
With technology dominating every aspect of our lives, cybersecurity has become an
increasingly pressing concern. There is an increasing need to safeguard our systems
from hackers as the world moves towards digitalization. In order to breach weak
systems, hackers exploit people's openness and vulnerability.
Key points:
Define Cybersecurity
Openness
Client-server Relationship
Authorization
Discretionary Access control
Non-repudiation
Public key architecture
NIST Cybersecurity Framework
Discussion/ Notes:
What is cybersecurity? Cybersecurity is the practice of protecting systems, networks,
and programs from digital attacks. These cyberattacks are usually aimed at accessing,
changing, or destroying sensitive information; extorting money from users via
ransomware; or interrupting normal business processes.
The term "openness" in the context of cybersecurity refers to the vulnerability of digital
devices to potential attackers. It signifies that all interactions on any digital device
provide a vector or path for potential attackers due to the inherent accessibility of the
Internet. This vulnerability is a fundamental concern in cybersecurity.
In the context of cybersecurity, what is the primary objective of an attacker when
targeting the Authentication process? The primary objective of an attacker when
targeting the Authentication process in cybersecurity is to gain unauthorized access by
assuming a legitimate identity. Attackers use techniques such as masquerading or
spoofing to impersonate someone who has legitimate access credentials. This allows
them to bypass security measures and gain entry to the network or system.
Client-server Relationship: The flow of information from your computer to the destination
What type of attack involves an attacker intercepting and eavesdropping on
communications to compromise Confidentiality?
, An interception and eavesdropping attack is aimed at compromising Confidentiality in
cybersecurity. In this type of attack, the attacker intercepts and eavesdrops on
communication to gain unauthorized access to sensitive information. The goal is to read
and capture data during transmission, potentially exposing it to unauthorized parties.
Authorization: The concept of authorization is that step that occurs after the
authentication and is the right or permission to access a resource. The most common
method of identifying the user is by issuing a token. In UNIX and Linux we refer to this
as the UID or user identifier. Then in Windows, we refer to that token as the SID or
security identifier.
Discretionary Access control: Segregate users according to role, privileges. To include
superusers that could use elevated privileges as required
Non-repudiation: Non-Repudiation is the component of the security model that ensures
that the sender cannot deny sending a message, and the recipient cannot deny having
received it. It provides a declaration and guarantee of the authenticity of the message's
origin and receipt, making it difficult for either party to deny their involvement in the
communication.
Public key architecture: This is the concept that was created to trace the origin of
ownership of data and the implementation of a public key architecture. The problem is,
what is the state of the machine or the device that the keys are being used in? You
cannot guarantee this in my and other opinions. Let me ask you a question.
NIST Cybersecurity Framework
- Identify
- Protect
- Detect
- Respond
- Recover
Summary:
With technology dominating every aspect of our lives, cybersecurity has become an
increasingly pressing concern. There is an increasing need to safeguard our systems
from hackers as the world moves towards digitalization. In order to breach weak
systems, hackers exploit people's openness and vulnerability.
