Unit 1: Introduction to Security

Cybersecurity

The practice of protecting computers, networks, devices, and data from unauthorized access, attack and damage. Mastery of this skill prevents digital harm, but it can be used against others for malicious purposes.

Internet of Things (IoT)

The network of physical devices, vehicles, home appliances, and other items embedded with electronics, software, sensors, actuators, and connectivity which enables these things to connect and exchange data.

Confidentiality

The protection of information from people who are not authorized to view it.

Integrity

A concept that aims at ensuring that information is protected from unauthorized or unintentional alteration.

Availability

The assurance that systems and data are accessible by authorized user when and where needed.

Patches

Updates that address and fix security vulnerabilities within a program or product.

Non-Repudiation

Ensures that one cannot deny having sent or received a message.

Vulnerability

A flaw or weakness in a system or device.

Risk

The potential for loss when an attack happens.

Threat

A potential for a cybercriminal to exploit a vulnerability.

Authentication

The process of identifying a user and granting the access; essentially proving that someone is who they are (first part of the AAA framework).

Authorization

The process of enforcing policies and user privileges; basically allowing/preventing access to areas or the ability to perform specific tasks (second part of the AAA framework).

Accounting

The process of measuring what is happening within the system; taking note/making data of any actions to the network/system (final part of the AAA framework).

AAA Framework

A model for controlling/tracking access to computer networks/resources: authentication (who are you?), authorization (what can you do?), and accounting (what did you do?).

Information Assurance

Measures that protect information by ensuring their confidentiality, integrity, and availability.

Phishing

The usage of deceptive emails and websites to maliciously gather personal information.

Malware

Any type of software that is designed to intentionally harm or damage a computer or network.

Social Engineering

Psychological manipulation to trick people into giving up information, clicking links, or taking unsafe actions without using technical hacking.

Elicitation

A tactic in social engineering where an attacker asks questions to extract useful information from a target.

Intimidation

A tactic in social engineering where an attacker uses threats or fear of negative consequences to pressure someone into acting.

Urgency

A tactic in social engineering where an attacker creates time pressure to prevent the target from thinking carefully before responding.

Credential Theft

Stealing login credentials like passwords or multi-factor authentication codes.