AMIS1003 Introduction to Cybersecurity - Chapter 1

Comprehensive practice questions covering the introductory concepts of Chapter 1, including the CIA triad, hacker methodologies, types of encryption, and cybersecurity statistics.

Who is the lecturer for AMIS1003 Introduction to Cybersecurity?

Ms. Ranjini Shanmugam

What is the primary definition of cybersecurity as provided in the lecture?

The practice of protecting internet-connected devices, systems, and networks from cyber threats such as hacking, data breaches, and other malicious activities.

How is 'Information' distinguished from 'Data' in the context of data threats?

Data refers to raw and unorganized facts and figures, while Information is data that is organized and processed to give it meaning and context.

What was the approximate global financial loss through cybercrime in the year $2023$?

Approximately $2\text{ trillion}$

Based on the exploration of the hidden internet, what are the percentages for the Surface Web, Deep Web, and Dark Web?

Surface Web: $4\%$, Deep Web: $90\%$, and Dark Web: $6\%$

What was the estimated impact of the WannaCry ransomware attack in $2017$?

It impacted more than $200,000$ computers across $150$ countries, causing losses estimated to be in the billions of dollars.

How many people had their personal information exposed in the Equifax data breach of $2017$?

$147\text{ million}$ people

According to the University of Maryland Research Report, how often does a hacker attack occur on a computer connected to the Internet?

Every $39$ seconds on average, which equates to $2,244$ malicious attacks every day.

What are the four common types of techniques adopted in day-to-day malicious cyberattacks mentioned in the lecture?

1. Malware, 2. Social Engineering, 3. Phishing Attack, and 4. Password Attack

Define the three types of hackers: White Hat, Black Hat, and Grey Hat.

White Hat: An ethical hacker who does not break the law. Black Hat: Someone who uses hacking skills for malicious and illegal purposes. Grey Hat: A hacker who usually obeys the law but may cross the line into black hat hacking in some instances.

List the five steps of hacker methodologies in order.

1. Reconnaissance, 2. Scanning, 3. Gaining access, 4. Maintaining access, and 5. Clearing tracks.

What are 'Webshells' and how are they used by hackers?

Malicious scripts (written in languages like PHP or JavaScript) used to achieve control over a web server after exploiting a vulnerability to execute commands, steal data, or deface websites.

What does the CIA Triad stand for in cybersecurity?

Confidentiality, Integrity, and Availability.

In the context of the CIA Triad, define 'Integrity'.

Preserving the accuracy and consistency of data throughout its lifecycle through measures like error-checking and checksums.

What are the components of the AAA framework in security?

Authentication (verifying identity), Authorization (granting access to resources), and Accounting (tracking user activities).

What are four methods of Social Engineering mentioned in the personal security section?

Phone Calls, Text Message, Phishing, and Shoulder Surfing.

List four examples of biological characteristics used in Biometric Systems.

Fingerprints, Iris/retina patterns, Facial features, and Voice patterns.

What is the difference between Symmetric and Asymmetric encryption?

Symmetric encryption uses the same single key for both encryption and decryption. Asymmetric encryption uses a pair of mathematically related keys: a Public Key (distributed to everyone) and a Private Key (kept secret by the owner).

What is a 'Hash' function and what is it used for in cybersecurity?

A mathematical function that converts an input of arbitrary length into an encrypted output of a fixed length; it is a one-way process used for achieving data integrity.

Identify two common examples of hashing algorithms.

SHA-256 and MD5