Cybersecurity Comprehensive Lecture
Notes
Abstract
This document provides a comprehensive overview of core cybersecurity principles,
including the CIA triad, cryptography, common attack vectors, and best practices for
defense. It is intended as both a study guide and reference paper for cybersecurity students.
Introduction
Cybersecurity is the practice of protecting systems, networks, and programs from digital
attacks.
With the rapid digitization of the modern world, cybersecurity has become a crucial field.
CIA Triad
Confidentiality ensures data is only accessible to authorized individuals.
Integrity ensures data is accurate and unaltered.
Availability ensures systems and data remain accessible when needed.
Cryptography
Symmetric encryption: Uses the same key for encryption and decryption (e.g., AES).
Asymmetric encryption: Uses public/private key pairs (e.g., RSA, ECC).
Hashing ensures integrity (e.g., SHA-256, MD5).
Attack Vectors
Phishing: Social engineering via deceptive emails.
SQL Injection: Exploiting unsanitized database queries.
XSS: Injecting malicious scripts into websites.
Defensive Practices
Multi-Factor Authentication (MFA).
Regular patch management.
Intrusion Detection and Prevention Systems (IDS/IPS).
References
Anderson, R. (2020). Security Engineering.
OWASP Foundation. (2024). OWASP Top 10.
NIST Cybersecurity Framework (2023).