FBLA Cybersecurity

A. Defend and Attack

1. Basic Security Risks: Risks to hardware, software, and data.

2. Virus Types: Worms, Trojans, spyware; symptoms (slowdown, data loss).

3. Phishing & Social Engineering: Tricks to steal information (phishing, spoofing).

4. Incident Reporting: Procedures for reporting security issues.

5. Preventive Maintenance: Regular updates and patches.

6. Virus Protection & Removal: Scanning and disinfecting storage and hardware.

7. Privacy and Personal Security: Safeguarding online information.

B. Network Security

1. Network Security Principles: IP spoofing, sniffing, password compromise.

2. Security Protocols: IPSEC, SSL, WPA, 802.1x - encryption and protection methods.

3. Firewall Techniques: Proxy, packet filter, gateway types.

4. Access Control: User policies, account permissions, and logging.

5. Security Solutions: VPNs, firewalls, and encryption methods.

C. Email Security

1. Common Email Issues: Junk mail, fraud, phishing, viruses.

2. Social Engineering in Communication: Recognizing manipulation attempts.

3. Legal & Responsible Use: Following privacy and ethical guidelines.

4. Spam Management: Strategies for handling unwanted mail.

D. Intrusion Detection

1. Types of Attacks: Denial of service, hacking, intrusion.

2. System Inspections: Checking configurations and vulnerabilities.

3. Patterns of Attack: Recognizing suspicious behaviors and responses.

4. Intrusion Tools: Identifying tools and techniques to combat attacks.

E. Public Key Infrastructure (PKI)

1. PKI Concepts: Public key encryption, digital signatures.

2. Certificate Authority: Role in security and authentication.

3. Web of Trust: How and when it’s used.

4. Cryptographic Protocols: Key agreements, time stamping, secure transactions.

F. Authentication

1. Authentication Types: Passwords, two-factor, biometrics.

2. Protocols: CHAP, RADIUS, EAP, Kerberos.

3. Secure Sockets Layer (SSL): Encrypting data for secure transmission.

4. User Education: Training for secure password practices.

G. Disaster Recovery

1. Disaster Effects: Data recovery in case of natural or system failures.

2. Backup Strategies: Hot/cold sites, offsite storage, regular backups.

3. Business Continuity: Maintaining function during and after disasters.

4. Hardware Protections: Surge protection, battery backup.

H. Physical Security

1. Physical Security Measures: Protecting against unauthorized access.

2. Environmental Hazards: Fire, flood, temperature control.

3. Security Awareness: Employee training in physical security practices.

4. Configuration Audits: Routine checks for physical security setup.

I. Cryptography

1. Encryption Levels: Types and levels of encryption (AES, DES).

2. Trust Models: Web of trust, Kerberos, certificates.

3. VPN and Data Encryption: Protecting data in transit.

4. Password Security: Storage and encryption of passwords.

J. Forensics Security

1. Evidence Handling: Preserving data for legal examination.

2. Timeline Analysis: Review of file access and modifications.

3. Forensic Tools: Software for analyzing digital evidence.

4. Legislation: Key laws governing digital forensics.

K. Cybersecurity Policy

1. National Initiatives: Key cybersecurity legislation.

2. Executive Orders: Government directives impacting security.