Introduction to Cyber Security
Chapter one
Agenda
• Understanding Cybersecurity & its goal
• Principles of Cybersecurity
• Threat Landscape
• Cybersecurity Frameworks and Standards
• Cybersecurity Technologies and Tools
• Cyber security Architecture
• Cybersecurity Best Practices
Understanding Cybersecurity
Definition:
▪ “Cybersecurity is the art of protecting networks, devices,
and data from unauthorized access or criminal use and the
practice of ensuring confidentiality, integrity, and
availability of information (Cisa, 2021)”
Understanding Cybersecurity
Goal of Cyber Security:
▪ The goal of cyber security is to protect
confidentiality, integrity, and availability of an
information.
Principles of Cybersecurity
The fundamental principles of cybersecurity guide the design and
implementation of effective security measures.
These principles include:
• Confidentiality, Integrity, Availability (CIA).
• Non-repudiation: preventing individuals from denying their actions
in a digital transaction.
• Authentication: verifying the identity of users and devices.
Threat Landscape
Threat Landscape
The threat landscape in cybersecurity is diverse and constantly
evolving.
Cyber threats are diverse Common cyber threats Cyber-criminals target
and constantly evolving, include Advanced Persistent various sectors, including
ranging from common Threat (APT), phishing, finance, healthcare,
malware attacks to ransomware, social government, retail,
sophisticated nation- engineering, distributed education and critical
state-sponsored denial-of-service (DDoS) infrastructure.
campaigns. attacks, and insider threats.
Cybersecurity Frameworks and
Standards
Cybersecurity Frameworks and Standards
Overview of Frameworks and Standards:
▪ Cybersecurity frameworks and standards provide guidelines
and best practices for organizations to assess, improve, and
maintain their cybersecurity posture.
Cybersecurity Frameworks and Standards
NIST Cybersecurity Framework:
▪ The NIST Cybersecurity Framework is a widely adopted
framework developed by the National Institute of Standards and
Technology (NIST) to help organizations manage and reduce
cybersecurity risks.
NIST Framework: Identify
• It consists of five Recover Protect
core functions for NIST Frame work
risk management.
Respond Detect
Cybersecurity Technologies and Tools
Cybersecurity Technologies and Tools
▪ Network Security Technologies: such as Firewalls, (IDS), (IPS),
and (VPNs) help protect networks from unauthorized access,
malicious traffic, and cyber attacks.
▪ Endpoint Security Technologies: such as; (EDR) solutions-
SIEM-, tools help secure endpoints such as computers, laptops,
smartphones, and tablets from malware, phishing, and other
threats.
Cybersecurity Technologies and Tools
▪ Encryption and Cryptography: Encryption and cryptography
technologies help protect data in transit and at rest by converting
it into unreadable ciphertext.
▪ Access Control Mechanisms: Access control mechanisms such
as authentication, authorization, and accounting (AAA) help
enforce security policies and restrict access to resources based on
user roles, permissions, and privileges.
Domains of Cyber Security
Information security
App. & Network security
Operational security
End-user Education
Internet Security
IOT Security
Session 2
Prayer Time
Challenge ☺
Classwork:
▪ Consider yourself a security engineer; which tool do you
think is most crucial for protecting the firm for which
you work?
Prevention Detection
What is security?
Response
What is security
What is security?
• S = Prevention + Detection + Response
• Security is a process, not an end state.
• No organization can be considered "secure" for any time.
• Security is the process of maintaining an acceptable level
of perceived risk.
Cybersecurity Architecture
Cybersecurity Architecture
Five principles of cyber security architecture:
1- Defense-in-depth 2- Least privilege
3- Separation of duties 4- Security in design
5- Comply with Policy
Five principles of cyber security Arch.
Defense-in-depth: is all about not relying on
any single security mechanism to keep the
system safe.
Cyber Security Architecture
1. Defense-in-depth: Deploy
Strong Firewalls Encryption
Multi-factor Implementing EDR Vulnerability
Authentication solutions assessment b/n WS
(MFA) & DB
Cyber Security Architecture
2) Least Privilege:
Giving access privileges to those who are authorized,
justified, and required for the duration of their need for that
access right.
Things to consider:
Hardening the system service configurations.
Stop Privilege creep with users.
Cyber Security Architecture
3) Segregation of Duties:
To avoid having a single point of control
✓ Approval Accessing DB
Releasing Fund
Stakeholders Production
Test Requirement
Code/Install Design
4) Secure by DSN
Security engineers must
create proper architects.
Production
4) Secure by DSN
Security must implement
Test Requirement
through start-to-finish.
Security must NOT
implement after.
Code/Install Design
Cyber Security Architecture
5) Comply with Policy:
Implementing understandable security policy.
Roles and responsibilities must be clearly defined.
Perform Access rights reviews (ARR): periodic log
reviews.
Cybersecurity Best Practices
Cyber Security Best Practices
Employee Training and Awareness
Risk Assessment and Management
Incident Response Planning
Legal and Compliance Considerations
Incident Response Planning: Challenge ☺
How do you handle this incident?
Your friend “Oogle” suddenly call you and inform you that his
Facebook account is being hacked recently, please help what should I
do?
What steps must consider to respond this incident?
End Chapter 1