Cybersecurity
Introduction
By
Radhika B S
Cyber Security
● Cyber security is all about defending
computing resources and data from
malicious attacks.
● For effective security, we need physical
protection, processes, protocols, tools,
techniques, laws and regulation.
● Lack of effective security may lead to
leak of sensitive information, financial
losses, endanger lives, disruption of
major infrastructures
2
Cyber Security
[Link]
3
Major Security Requirements (CIA Triad)
● Confidentiality: Concealing information
● Integrity: Ensuring trustworthiness of the
data and its source
● Availability: Ensuring that the services are
available when required by the user
4
Confidentiality
● Confidentiality: Concealing information.
○ Encryption and Access control help in achieving confidentiality
○ Secret message passing dates back to thousands of years
Substitution Cipher by Caesar
Transposition Cipher by Spartans
(Scytale cipher)
5
Confidentiality
We Entered the Lounge to Check Our Main
Entrance
Image Steganography Text Steganography
6
Enigma Machine
● Encryption machine used by the Germans in the World
War 2.
● Resembled a typewriter. Pressing a letter key is would
light up a
bulb for another letter.
● Used three rotors, each rotated at different speeds
● Required an initial set up key
● On encrypting a letter, it never produced the same
letter
7
Enigma Machine
8
The Bombe Machine
● On encrypting a letter, it never produced the
same letter
● A research center at Bletchley Park was set
up to break the Enigma encryption
● Here, Alan Turing and his team developed a
machine called the Bombe
9
Confidentiality
● In today’s digitized world, a lot of sensitive information is stored in the digital form
● Online shopping, digital banking, digitisation of documents, digital communication
● The olden cryptography techniques are inadequate for today’s requirement
10
Confidentiality
● We use stronger cryptographic algorithms
such as AES, RSA, Elliptic Curve Cryptography
● They are open algorithms
● In practical applications, longer keys are used
so that it becomes computationally very
expensive to crack the algorithm
[Link]
11
Confidentiality
Access Control
● Access Control also plays an important role in providing confidentiality
● It helps in regulating access to resources
● Every access request for a resource goes through an access control module which
decides whether to allow or deny the access based on predefined rules
12
Integrity
● Source integrity: Ensuring the identity of the source entity
● Data integrity: Ensuring that the data is not modified by a malicious entity
○ This can be done using hashing
○ Hash functions are one-way functions that help in detecting any changes made in
a message
13
Availability
● Availability: Ensuring that the services are available when required by the user.
○ Unavailability of a service may cause financial loss, damage reputation of an
organization, may even endanger lives
○ Denial of service (DoS), Distributed denial of services (DDoS), ransomware are
common threats to availability
14
Other Major Requirements
● Non-repudiation: Assurance that the sender of information is provided with proof of
delivery and the recipient is provided with proof of the sender's identity, so neither
can later deny having processed the information.
● Privacy: Protecting the personal information of individuals.
15
References
1. How did the Enigma Machine work? [Link]
2. [Link]
3. [Link]
16