The evolution of cyber security. (Module 2)

Computer virus

Malicious code written to interfere with computer operations and cause damage to data and software

Malware

Software designed to harm devices or network

Social Engineering

A manipulation technique that exploits human error to gain private information, access, or valuables

Phising

The use of digital communications to trick people into revealing sensitive data or deploying malicious

Business Email Compromise (BEC)

A threat actor sends an email message that seems to be from a known source to make a seemingly legitimate request for information, in order to obtain a financial advantage.

Spear phishing

A malicious email attack that targets a specific user or group of users. The email seems to originate from a trusted source.

Whaling

A form of spear phishing. Threat actors target company executives to gain access to sensitive data.

Vishing

The exploitation of electronic voice communication to obtain sensitive information or to impersonate a known source.

Smishing

The use of text messages to trick users, in order to obtain sensitive information or to impersonate a known source.

Viruses

Malicious code written to interfere with computer operations and cause damage to data and software.

Worms

Malware that can duplicate and spread itself across systems on its own.

Ransomware

A malicious attack where threat actors encrypt an organization's data and demand payment to restore access

Spyware

Malware that’s used to gather and sell information without consent.

Social media phishing

A threat actor collects detailed information about their target from social media sites. Then, they initiate an attack

Watering hole attack

A threat actor attacks a website frequently visited by a specific group of users.

USB baiting

A threat actor strategically leaves a malware USB stick for an employee to find and install, to unknowingly infect a network.

Physical social engineering

A threat actor impersonates an employee, customer, or vendor to obtain unauthorized access to a physical location.

CISSP

Certified Information Systems Security Professional

Security and risk management

Defines security goals and objectives, risk mitigation, compliance, business continuity, and the law (ex. Updating company policies related to private health information)

Asset security

Secures digital and physical assets. It’s also related to the storage, maintenance, retention, and destruction of data. (Analysts make sure old equipment is properly disposed of and destroyed.)

Security architecture and engineering

Optimizes data security by ensuring effective tools, systems, and processes are in place. (Security analysts are tasked to configure a firewall.)

Communicating and network security

Manage and secure physical networks and wireless communications. (Creating a network policy to prevent and mitigate exposure.)

Identity and access management

Keeps data secure, by ensuring users follow established policies to control and manage physical assets, like office spaces, and logical assets, such as networks and applications. (Ex. setting up key cards for buildings)

Security assessment and testing

Conducting security control testing, collecting and analyzing data, and conducting security audits to monitor for risks, threats, and vulnerabilities. (ex. Payroll information is limited to certain employees so analysts would regularly audit permissions to ensure that no unauthorized person can view employee salaries.)

Security operations

Conducting investigations and implementing preventative measures. (ex. Receiving an alert that an unknown device is connected to your network. Follow organizations' policies and procedures to quickly stop the potential threat.)

Software development security

Uses secure coding practices, which are a set of recommended guidelines that are used to create secure applications and services. (Ex. Partner team creating a new mobile app, then the analyst may be asked to advise on the password policies or properly securing and managing user data.)

Password attack

A password attack is an attempt to access password-secured devices, systems, networks, or data.

Physical attack

A physical attack is a security incident that affects not only digital but also physical environments where the incident is deployed.

Adversarial artificial intelligence

Adversarial artificial intelligence is a technique that manipulates artificial intelligence and machine learning technology to conduct attacks more efficiently. Adversarial artificial intelligence falls under both the communication and network security and the identity and access management domains.

Supply-chain attack

A supply-chain attack targets systems, applications, hardware, and/or software to locate a vulnerability where malware can be deployed.

Cryptographic attack

A cryptographic attack affects secure forms of communication between a sender and intended recipient. Some forms of cryptographic attacks are: 

• Birthday

• Collision

• Downgrade

Advanced persistent threats

Advanced persistent threats (APTs) have significant expertise accessing an organization's network without authorization. APTs tend to research their targets (e.g., large corporations or government entities)  in advance and can remain undetected for an extended period of time.

Insider threats

Insider threats abuse their authorized access to obtain data that may harm an organization.

Hacktivists

Hacktivists are threat actors that are driven by a political agenda

Hacker

A hacker is any person who uses computers to gain access to computer systems, networks, or data. They can be beginner or advanced technology professionals who use their skills for a variety of reasons. There are three main categories of hackers:

Authorized hackers are also called ethical hackers.

Semi-authorized hackers are considered researchers.

Unauthorized hackers are also called unethical hackers.