Cybersecurity Engineering
Comprehensive Core Concept Study Notes
1. Core Pillars of Cybersecurity
Information security models are anchored around the fundamental CIA Triad framework:
• Confidentiality: Ensuring that data is accessible only to authorized entities. (Achieved via Encryption,
Access Controls).
• Integrity: Protecting data consistency, accuracy, and trustworthiness from unauthorized modification.
(Achieved via Hashing, Digital Signatures).
• Availability: Ensuring timely and reliable access to data assets and resources for authorized users.
(Achieved via Redundancy, Backups, DDoS mitigation).
2. Cryptographic Principles
Cryptographic systems serve as foundational building blocks for security applications.
Cryptographic
Key Structure Primary Use Cases Common Algorithms
Type
Single shared secret
Symmetric Bulk data encryption AES, ChaCha20
key
Asymmetric Public-private key pair Key exchange, digital signatures RSA, ECC (ECDSA)
None (one-way Integrity verification, password SHA-256, SHA-3,
Hashing
function) storage bcrypt
3. Network Security & Threat Mitigations
Defending organizational perimeters requires tiered structural defense configurations:
Defense in Depth: A strategy leveraging multiple layering defense mechanisms so that if one security
control fails, secondary layers are present to contain the breach. Elements include firewalls, IDS/IPS,
endpoint detection (EDR), Network Segmentation, and Identity and Access Management (IAM).
Cybersecurity Engineering — Study Notes 1