Cyber Security Basics
The CIA triad, categories of malware, phishing and social engineering, authentication versus authorisation and multi-factor authentication, symmetric and asymmetric encryption and what a digital certificate does, firewalls, and safe-backup practice.
What you will be able to do
- State the CIA triad and what each property protects.
- Distinguish the main malware types and how each spreads.
- Tell authentication from authorisation and give the three authentication factors.
- Explain symmetric vs asymmetric encryption and the role of a digital certificate; describe what a firewall does.
What is inside this lesson
- 1The CIA triad
- 2Types of malware
- 3Phishing and social engineering
- 4Authentication and authorisation
- 5Encryption and digital certificates
- 6Firewalls and backups
- 7Common confusions
- 8Quick revision
Get Pro for full access. This is section 1 of 8; the rest of the lesson opens with Pro at onelystop.in/upgrade.
The CIA triad
Information security is usually framed as protecting three properties:
- Confidentiality: only authorised people can read the data.
- Integrity: the data is not altered or destroyed without authorisation, and any change is detectable.
- Availability: the data and services are usable when legitimately needed.
An attack usually targets one or more of these. Ransomware attacks availability and confidentiality; tampering with a record attacks integrity; a denial-of-service flood attacks availability.
Reading the 8 sections above is free. A free account opens the first 2 topics of every subject in full, along with flashcards and private notes.