Introduction to Computing Module 2

Digital Security

An environment where host, data, and network security work together to provide comprehensive protection.

Host Security

Constitutes the suite of protective measures and protocols aimed at securing individual computing devices, such as desktop computers, laptops, servers, and mobile devices, against cyber threats, unauthorized access, and data breaches.

Consistent Software Updates

Keep all software, including the operating system and applications, consistently updated to patch known vulnerabilities.

Robust Password Policies

Use strong, unique passwords and regularly change passwords to reduce the chances of unauthorized access.

User Awareness Training

Educate users about safe computing practices and how to identify and respond to cybersecurity threats, such as phishing emails and suspicious attachments.

Adoption of Encryption Technologies

Implement encryption solutions for data in transit and at rest, particularly for sensitive or critical information.

Data Security

The protection of digital data from unauthorized access, corruption, or theft. It encompasses various measures and protocols implemented to ensure the confidentiality, integrity, and availability of sensitive information.

Regular Backups

Create duplicates that can be restored in case of data loss, corruption, or system failures.

Confidentiality

Protects sensitive information by maintaining privacy and complying with legal regulations like GDPR and HIPAA.

Network Security

Encompasses measures to protect the integrity, confidentiality, and availability of computer networks and data.

Regular Updates and Patch Management

Ensure all software and network devices are updated to protect against vulnerabilities.

Comprehensive Access Control Policies

Apply the principle of least privilege by giving users access only to what is necessary for their roles.

Data Encryption

Protect sensitive data both at rest and in transit to prevent unauthorized access.

Security Awareness Training

Educate employees on security practices, including phishing and social engineering threats.

Advanced Security Technologies

Use tools like NGFW, EDR, and secure web gateways to guard against sophisticated cyber threats.

Malware

Malicious software designed to cause harm to computer systems, networks, or users. Can steal sensitive information such as passwords and credit card numbers, disrupt system operations, and allow attackers to gain unauthorized access to a device.

Botnets (Virus)

Makes your PC into a zombie. It is an executable code attached to another executable file. Once a program virus is active, it will infect other programs on the computer

Worms

Spreads across computers. It replicate themselves on the system, attaching themselves to different files and looking for pathways between computers, such as computer network that shares common file storage areas.

Trojan Horse

A type of malware that carries out malicious operations under the appearance of a desired operation such as playing an online game. binds itself to non-executable files, such as image files, and audio files. Sneaks malware into your PC.

Adware

It displays unwanted ads and pop-ups on the computer. It comes along with software downloads and packages. It generates revenue for the software distributor by displaying ads.

Spyware

Its purpose is to steal private information from a computer system for a third party. It collects information and sends it to the hacker.

Ransomware

A type of malware that encrypts a victim’s data where the attacker demands a “ransom” , or payment, to restore access to files and the network.

Browser Redirect

When a web browser directs you to a website you did not intend to visit.

Malwarebytes

An example of antivirus that handles malware detection and removal.

Antivirus

Security software programs made to find, stop, and eliminate malware from infected systems.

Physical Security

The protection of personnel, hardware, software, networks, and data from physical actions and events that could cause serious loss or damage to an enterprise, agency, or institution.

Employee Accidents

Mistakes and carelessness that can be as damaging as intentional acts.

Internal Bad Actors

Individuals within an organization who intentionally engage in fraudulent or harmful activities.

Equipment Failure

Power outages, surveillance cameras, floodlights, and other deterrents can break; poorly maintained smoke detectors and safety systems can also fail.

Vandalism

Damaged infrastructure, such as a broken fence.

Theft

Can involve cash on hand or other liquid assets, computers, electronics, specialized devices, confidential documents, or sensitive information.

Weather

Can cause unplanned downtime if employees cannot get to work and can affect electronics, heavy equipment, and supply chains.

Natural Disaster

Earthquakes, tsunami, and floods that can level entire towns.

Civil Unrest or Violence

An incident unrelated to a company that could lead to protests or riots where it operates and may happen quickly without enough time to predict or prepare.

Troubleshooting

A systematic approach to problem-solving used to find and correct issues with complex machines, electronics, computers, and software systems.

Step 1: Identify the Problem

The first troubleshooting step, involving open-ended and close-ended questions to determine the problem.

Step 2: Establish a Theory of Probable Causes

Determine possible causes of the security problem.

Step 3: Test the Theory to Determine Cause

Test the possible causes by verifying account settings, resetting passwords, checking permissions, checking firewall logs and settings, and scanning for viruses.

Step 4: Establish a Plan of Action to Resolve the Problem and Implement the Solution

If no solution is achieved in the previous step, further research is needed to implement the solution.

Step 5: Verify Full System Functionality and Implement Preventive Measures

Verify the solution and full system functionality by rebooting the computer, logging on, connecting to the wireless network, verifying file and folder access, and checking that no virus is found with a virus scan.

Step 6: Document Findings, Actions, and Outcomes

Document the findings, actions taken, and outcomes of the troubleshooting process.