Cyber Security - Definitions and Examples (Module 2 & 3)
Module 2: Cryptography and Cryptanalysis
1. Cryptography:
- Definition: The practice of securing communication using mathematical techniques.
- Example: Encrypting a message using AES before sending it over the internet.
2. Symmetric Key Cryptography:
- Definition: Uses a single key for both encryption and decryption.
- Example: AES (Advanced Encryption Standard) - Used in secure messaging apps.
3. Asymmetric Key Cryptography:
- Definition: Uses a public key for encryption and a private key for decryption.
- Example: RSA (Rivest-Shamir-Adleman) - Used in SSL/TLS certificates.
4. Message Authentication:
- Definition: Ensures a message remains unaltered during transmission.
- Example: HMAC (Hashed Message Authentication Code) - Used in banking transactions.
5. Digital Signatures:
- Definition: Verifies authenticity and integrity of digital documents.
- Example: DSA (Digital Signature Algorithm) - Used in software authentication.
6. Firewalls:
- Definition: Security barriers that monitor and control incoming/outgoing network traffic.
- Example: Windows Firewall blocks unauthorized network access.
7. Hashing:
- Definition: Converts data into a fixed-length hash value for verification.
- Example: SHA-256 - Used in Bitcoin transactions.
8. Steganography:
- Definition: Hiding secret messages inside digital media (images, videos, text).
- Example: Embedding text messages inside an image file.
Module 3: Infrastructure and Network Security
1. Network Security:
- Definition: Protects networks from cyber threats and unauthorized access.
- Example: Using VPNs to encrypt data over public Wi-Fi.
2. Packet Sniffing:
- Definition: Capturing and analyzing network traffic.
- Example: Wireshark tool analyzes network packets for security threats.
3. DDoS Attacks:
- Definition: Overloading a server with excessive requests to crash it.
- Example: A botnet attack on a website causing downtime.
4. Intrusion Detection System (IDS):
- Definition: Detects suspicious network activity.
- Example: Snort IDS monitors and alerts administrators about network threats.
5. Intrusion Prevention System (IPS):
- Definition: Actively blocks cyber threats in real time.
- Example: Suricata IPS automatically blocks malicious traffic.
6. Security Information Management (SIM):
- Definition: Collects and analyzes security logs.
- Example: Splunk tool processes security event logs.
7. Firewalls:
- Definition: Filters and blocks malicious network traffic.
- Example: iptables in Linux restricts unauthorized access.
8. Brute-Force Protection:
- Definition: Prevents repeated login attempts by blocking attackers.
- Example: Fail2ban automatically blocks IPs with failed login attempts.