Cybersecurity Fundamentals: CIA Triad, Authentication, Encryption, Malware & Social Engineering

Confidentiality

Protecting data from unauthorized access; keeping secrets private. (Breach: Someone reads your private DMs).

Integrity

Ensuring data is accurate and has not been tampered with or changed. (Breach: Someone changes a price or a grade).

Availability

Ensuring systems and data are reliable and accessible when needed. (Breach: An app crashes or a server goes down).

Multifactor Authentication (MFA)

Using at least two different categories of evidence to verify a user's identity.

Knowledge Factor

Something you KNOW (e.g., Password, PIN, Secret Question).

Possession Factor

Something you HAVE (e.g., A smartphone for codes, Steam Guard, or a physical key).

Inherence Factor

Something you ARE (e.g., FaceID, Fingerprint, or Retina scan).

Symmetric Encryption

Uses a single private key for both locking and unlocking; risky because the key must be shared.

Asymmetric Encryption

Uses a Public Key to encrypt and a Private Key to decrypt; much more secure.

SSL (Secure Sockets Layer)

A security protocol shown by a padlock icon in the browser; means the site is following security rules.

Certificate Authorities (CAs)

Trusted organizations that verify the ownership of websites and issue digital security certificates.

Rogue Access Point

An unauthorized Wi-Fi setup that can be used to bypass firewalls and steal data from connected devices.

Malware

Software designed to damage a computer system or take unauthorized control.

Computer Virus

A type of malware that copies itself and spreads by attaching to legitimate programs.

Phishing

Tricking users into giving up personal info through fake emails or websites that look real.

Keylogging

A program that records every single keystroke to steal passwords and login info.

Social Engineering

Using psychological manipulation to trick people into giving away confidential information.

Software Updates

Essential patches that fix 'bugs' or design flaws that hackers use to exploit a system.