Scribd
Upload
15 views3 pages

Cyber Security Overview and Key Concepts

The document provides an overview of cyber security, defining it as the protection of systems and networks from digital attacks. It emphasizes the importance of data protection, business continuity, and national security, highlighting key concepts such as threats, vulnerabilities, and risk assessment. Additionally, it outlines core areas of cyber security, including network, information, endpoint, application, and cloud security, along with best practices like regular updates, backups, and user training.

Uploaded by

anithakumaran29
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
15 views3 pages

Cyber Security Overview and Key Concepts

The document provides an overview of cyber security, defining it as the protection of systems and networks from digital attacks. It emphasizes the importance of data protection, business continuity, and national security, highlighting key concepts such as threats, vulnerabilities, and risk assessment. Additionally, it outlines core areas of cyber security, including network, information, endpoint, application, and cloud security, along with best practices like regular updates, backups, and user training.

Uploaded by

anithakumaran29
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Day 1: Overview of Cyber Security, Importance & Key Concepts

1. Introduction to Cyber Security

- Definition: Cyber Security refers to the practice of protecting systems, networks, and programs from
digital attacks.

- Purpose: The main objective of cyber security is to defend against cyber threats such as hacking,
phishing, ransomware, and data breaches.

2. Importance of Cyber Security

- Data Protection: Protects sensitive data (personal info, credit card details, intellectual property).

- Business Continuity: Prevents costly data breaches that can disrupt operations.

- National Security: Critical infrastructure (energy, finance, healthcare) needs protection from state-
sponsored attacks.

Example:

- Target Data Breach (2013): Target lost 40 million credit card records due to a cyber-attack, costing them
$18.5 million in settlements and damaging their reputation.

3. Key Concepts in Cyber Security

a. Threats

- Malware: Malicious software designed to damage systems (e.g., viruses, worms, trojans).

- Phishing: Deceptive emails or messages that trick users into sharing sensitive data.

- Ransomware: Attackers encrypt data and demand a ransom for its release.

b. Vulnerabilities

- Software Bugs: Flaws in code that can be exploited by attackers.

- Weak Passwords: Easy-to-guess passwords like “123456” create vulnerabilities.


c. Risk

- Risk Assessment: Evaluate the likelihood and impact of a cyber-attack.

- Mitigation: Steps taken to minimize risks (e.g., firewalls, encryption, training).

4. Core Areas of Cyber Security

a. Network Security

- Protects the network from unauthorized access, attacks, and disruptions.

- Tools: Firewalls, Intrusion Detection Systems (IDS), Virtual Private Networks (VPNs).

b. Information Security

- Ensures the confidentiality, integrity, and availability (CIA triad) of information.

Real-World Example:

- Confidentiality: Encrypting sensitive customer data to prevent unauthorized access.

- Integrity: Hashing algorithms (SHA-256) to ensure data has not been altered during transmission.

c. Endpoint Security

- Protects individual devices (laptops, mobile phones) from threats.

- Antivirus, Patch Management: Regularly updating software to fix security vulnerabilities.

d. Application Security

- Protects applications from vulnerabilities such as SQL injection, cross-site scripting (XSS).

e. Cloud Security

- Safeguards cloud infrastructure, applications, and data stored in the cloud.


5. Best Practices in Cyber Security

- Regular Updates: Ensure systems and software are always up-to-date.

- Backups: Regularly backup important data to mitigate ransomware attacks.

- User Training: Employees are often the weakest link. Conduct regular training to avoid phishing and
other social engineering attacks.

You might also like