1. What Is Cybersecurity?
Cybersecurity
Cybersecurity is the practice of protecting computers, phones, networks, applications, and data from
unauthorized access, damage, theft, or disruption.
Why is it important?
Almost everything today depends on digital systems: banking, education, communication, shopping,
hospitals, businesses, and government services. A security problem can affect both individuals and
organizations.
Simple example
Your email account has a password. If someone steals the password and enters your account,
cybersecurity measures such as multi-factor authentication can help prevent or limit the attack.
Main goals
Cybersecurity mainly tries to keep information private, accurate, and available to authorized people.
Beginner-friendly • 10 pages • Cybersecurity fundamentals
Basic Cybersecurity Introduction • Page 1
2. The CIA Triad
Confidentiality
Only authorized people should be able to see sensitive information. Example: Your banking password
should not be visible to other people.
Integrity
Information should remain accurate and should not be changed without authorization. Example: An
attacker should not be able to secretly change a bank balance.
Availability
Systems and information should be available when authorized users need them. Example: A hospital
system should remain accessible during an emergency.
Remember it as
Confidentiality = keep it secret. Integrity = keep it correct. Availability = keep it accessible.
Basic Cybersecurity Introduction • Page 2
3. Common Cyber Threats
Malware
Malicious software designed to damage systems, steal information, spy on users, or perform
unauthorized actions. Examples include viruses, worms, trojans, ransomware, and spyware.
Phishing
A fake email, message, or website attempts to trick a person into revealing information or opening a
malicious file.
Password attacks
Attackers may guess weak passwords, reuse leaked passwords, or try large numbers of possible
passwords.
Social engineering
Instead of attacking technology directly, an attacker manipulates people into giving information or
performing an unsafe action.
Denial of Service
An attacker attempts to make a service unavailable by overwhelming or disrupting it.
Basic Cybersecurity Introduction • Page 3
4. Networks and the Internet
What is a network?
A network connects devices so they can communicate and share resources. Your home Wi-Fi is a small
network.
IP address
An IP address identifies a device or network interface so that data can be delivered to the correct
destination.
Router
A router connects networks and forwards data between them. A home router commonly connects your
local devices to the internet.
DNS
The Domain Name System converts human-friendly names such as [Link] into IP addresses that
computers can use.
Ports
Ports help identify network services. For example, web services commonly use ports associated with
HTTP and HTTPS.
Basic Cybersecurity Introduction • Page 4
5. Web Security Basics
HTTP and HTTPS
HTTP is used to transfer web information. HTTPS adds encryption and authentication using TLS, helping
protect data while it travels between your browser and a website.
Authentication
Authentication answers: 'Who are you?' Passwords, passkeys, security keys, and one-time codes are
examples.
Authorization
Authorization answers: 'What are you allowed to do?' A normal user may not be allowed to access an
administrator page.
Common web vulnerabilities
Important beginner topics include SQL injection, cross-site scripting (XSS), broken access control,
insecure file uploads, and command injection.
Safe learning
Practice web security only on systems you own or on intentionally vulnerable training platforms.
Basic Cybersecurity Introduction • Page 5
6. Passwords and Account Security
Use strong passwords
A strong password is long, unique, and difficult to guess. Avoid using the same password on multiple
important accounts.
Password managers
A password manager can generate and store unique passwords so you do not have to remember every
password.
Multi-factor authentication
MFA requires an additional verification factor beyond the password. This can greatly reduce the damage
caused by stolen passwords.
Watch for phishing
Never enter credentials into a website just because a message tells you to. Check the website address
and verify unexpected requests.
Updates
Keep operating systems, browsers, apps, and security software updated because updates often fix
known vulnerabilities.
Basic Cybersecurity Introduction • Page 6
7. Linux and Cybersecurity
Why Linux?
Linux is widely used in servers, cloud infrastructure, networking, cybersecurity tools, and security labs.
Basic commands
Useful beginner commands include pwd (show location), ls (list files), cd (change directory), mkdir
(create directory), cp (copy), mv (move), and cat (view text).
Permissions
Linux uses permissions to control who can read, write, or execute files. Understanding permissions is
important for system security.
Useful tools
Beginners may encounter tools such as Nmap for network discovery, Wireshark for packet analysis, and
Burp Suite for web application testing.
Safe practice
Use virtual machines or dedicated labs when learning security tools. Do not scan or attack systems
without permission.
Basic Cybersecurity Introduction • Page 7
8. Cryptography Basics
What is cryptography?
Cryptography uses mathematical techniques to protect information and communications.
Encryption
Encryption converts readable data (plaintext) into protected data (ciphertext). A key is used to encrypt
and decrypt information.
Symmetric encryption
The same secret key is used for encryption and decryption. It is generally efficient for protecting large
amounts of data.
Asymmetric encryption
A key pair is used: a public key and a private key. It is useful for secure communication, authentication,
and digital signatures.
Hashing
A hash function produces a fixed-size value from data. Hashes are commonly used for integrity checking
and securely storing passwords when appropriate password-hashing algorithms are used.
Basic Cybersecurity Introduction • Page 8
9. How to Stay Safe Online
Think before clicking
Be careful with unexpected links, attachments, QR codes, and urgent requests.
Protect devices
Use screen locks, updates, reputable security software, and backups.
Secure Wi-Fi
Use a strong Wi-Fi password and modern security settings. Avoid entering sensitive information on
unknown public networks unless the connection is appropriately protected.
Back up important data
Keep important files backed up so you can recover from accidental deletion, device failure, or
ransomware.
Report suspicious activity
If you suspect an account or device has been compromised, change credentials from a trusted device,
enable MFA, preserve useful evidence, and contact the relevant service or administrator.
Basic Cybersecurity Introduction • Page 9
10. Beginner Cybersecurity Roadmap
Step 1 — Computer basics
Learn operating systems, files, processes, permissions, hardware, and basic troubleshooting.
Step 2 — Networking
Learn IP addresses, TCP/IP, DNS, HTTP/HTTPS, ports, routers, firewalls, and basic packet concepts.
Step 3 — Linux
Practice the command line, permissions, processes, networking commands, and shell basics.
Step 4 — Security fundamentals
Study the CIA triad, authentication, authorization, encryption, vulnerabilities, threats, risk, and incident
response.
Step 5 — Practical skills
Use legal labs and CTFs to practice Nmap, Wireshark, Burp Suite, web security, cryptography, and basic
scripting.
Step 6 — Choose a direction
Possible paths include SOC/security operations, penetration testing, web security, digital forensics, cloud
security, application security, or security engineering.
Golden rule
Only test systems when you have explicit permission. Cybersecurity skills should be used to protect
systems, not to access or damage systems without authorization.
Basic Cybersecurity Introduction • Page 10