Fundamentals of Security in Cybersecurity

Overview of Cybersecurity Fundamentals

  • Introduction to Security Fundamentals

    • Focus on foundational concepts before technical topics

    • Importance of understanding internal and external threats

The Challenge of Security vs. Usability

  • Difficulty in ensuring security due to:

    • External threats from cyber attackers

    • Internal threats from end users attempting to bypass security controls

  • Friction between security and usability:

    • Example of Internet Service Provider (ISP) modem/router setup:

    • Default settings include long, complex passwords (e.g., 3Percent1WTAmpersandExclamation92Hashtag SXH)

    • Users often change to simpler, memorable passwords (e.g., Magic2912, CupcakeHashtag1)

    • Simpler passwords are easier for attackers to crack due to length and use of common words

  • Critical Weakness:

    • Long, complex passwords can be difficult to memorize, increasing the chance of being seen by passersby

  • Balance of security and usability:

    • Security must not interfere excessively with user convenience

    • Users will attempt to bypass stricter security for ease of use

  • Consequences of this trade-off:

    • As security measures loosen for usability, vulnerability to attacks increases

    • In 2022, average cost of a data breach for companies: $4,350,000

Definitions in Cybersecurity

  • Importance of understanding key terms:

    • Information Security:

    • Protects data from unauthorized access, modification, disruption, disclosure, corruption, or destruction.

    • Focus is on data itself, rather than the systems that store it.

    • Information System Security:

    • Protects systems that hold and process critical data (e.g., computers, servers, network devices, smartphones).

    • Focus is on the devices themselves rather than the data they contain.

Course Objectives

  • Focus on Domain One objectives:

    • Objective 1.1: Compare and contrast various types of security controls

    • Objective 1.2: Summarize fundamental security concepts

    • Note: Objective 1.2 will be covered first, despite its ordering.

The CIA Triad

  • CIA Triad:

    • Three fundamental pillars of security:

    • Confidentiality:

      • Ensures information is accessible only to authorized individuals.

      • Example: Encrypting sensitive files for authorized access.

    • Integrity:

      • Maintains data accuracy and prevents unauthorized changes.

      • Example: Using checksums to verify data during transfers.

    • Availability:

      • Ensures authorized users can access information and resources when needed.

      • Example: Implementing redundancy measures for websites to remain online during high traffic.

Nonrepudiation and Authentication

  • Nonrepudiation:

    • Guarantees an action or event cannot be denied by involved parties.

    • Example: A digitally signed email confirms sender identity.

  • Authentication:

    • Process of verifying the identity of a user or system.

    • Example: Username and password check to access email.

  • Authorization:

    • Determines permissions of an authenticated user for actions or resources.

    • Example: User may have read but not write access in a company database.

  • Accounting:

    • Tracks user activities and resource usage for monitoring and auditing.

    • Example: Logging actions upon user login to detect unusual behavior.

Categories of Security Controls

  • Security Controls:

    • Measures to mitigate risks and protect information systems' confidentiality, integrity, and availability.

    • Categories include:

    • Technical Controls:

    • Managerial Controls:

    • Operational Controls:

    • Physical Controls:

  • Types of Security Controls:

    • Preventative Controls: Preclude security incidents

    • Deterrent Controls: Discourages potential threats

    • Detective Controls: Identify and record security incidents

    • Corrective Controls: Resolve incidents and restore systems

    • Compensating Controls: Alternative measures for security gaps

    • Directive Controls: Policies that guide security protocols

Zero Trust Security Model

  • Zero Trust Principle:

    • No assumed trust for any user or system, regardless of location.

    • Verification required for all access to resources.

  • Control Plane:

    • Features adaptive identity, threat scope reduction, policy-driven access controls, and secured zones.

  • Data Plane:

    • Focus on subject/system, policy engine, policy administrator, and policy enforcement points.

Conclusion of Section

  • Review and quiz to reinforce understanding of threats and vulnerabilities covered in the section.

  • Prepare for in-depth discussions on security fundamentals in the upcoming lessons.