Cybersecurity Fundamentals and Principles

Foundations of Cybersecurity and Information Assurance

  • Information assurance is the broad category of protecting organizational data and assets through specific tasks, policies, and procedures.
  • Physical threats include natural disasters like floods and fires, while human threats include insider threats (e.g., Jack Teixeira and Edward Snowden).
  • Cybersecurity is the process of protecting systems from unintended or malicious changes.
  • A cyberattack is an attempt to steal, damage, or destroy data; the attack surface represents all compromise-prone areas.
  • An attack vector is the specific path a hacker takes, such as fraudulent e-mails or malicious links.

Hacker Classifications and Motivations

  • Ethical hackers are law-abiding; malicious hackers operate illegally; gray-hat hackers act without permission but do no harm.
  • Script kiddies use premade tools and lack the technical maturity of professionals.
  • Motivations for hacking include financial gain, hacktivism (e.g., Anonymous), state-sponsored cyberwarfare (e.g., Stuxnet worm), revenge, thrill-seeking, and business competition.
  • Cyberterrorism involves politically motivated disruptions designed to cause widespread fear.
  • Historical examples of viruses include the 1986 Brain boot sector virus (Pakistani flu) and the 1999 Melissa virus.
  • Noted hackers include Kevin Mitnick, Max Butler, and Michael Calce.

The Darknet and Networking Anonymity

  • The deep web contains resources not indexed by standard search engines.
  • The darknet (dark web) is an underground portion of the internet.
  • Anonymity on the darknet is achieved via the onion network, which reroutes data through multiple computers with layers of encryption.
  • Tor browser (The Onion Router) is the primary free, open-source tool used to access these networks.

Defense Strategies and Professional Skills

  • Bug-bounty programs (used by Google, Facebook, and Microsoft) offer rewards for finding software vulnerabilities.
  • Penetration testing (pen testing) involves ethical hackers, often called red teams, attempting to breach a network to find flaws.
  • Hard skills for the field include proficiency in operating systems (Microsoft), networking protocols, HTML, and coding.
  • Soft skills include collaboration, leadership, and problem-solving.
  • Ethics and a formal code of ethics establish the value system for an organization.
  • Security clearance provides status for accessing classified data and locations.

Industry Certifications

  • Certiport: Offers IT Specialist certifications in Cybersecurity and Network Security.
  • Cisco: Provides the CCST (Cisco Certified Support Technician) and CyberOps certifications.
  • NOCTI: Offers vendor-neutral Cybersecurity Fundamentals certifications.
  • CompTIA: Features a four-level track including Security+, CySA+, PenTest+, and CASP+.
  • Specialized: Includes CEH (Certified Ethical Hacker) from EC-Council and CISSP from ISC2.

Core Security Principles and Domains

  • CIA Triad:
    • Confidentiality: Ensuring data privacy via user rights and encryption.
    • Integrity: Ensuring data is untampered; supported by nonrepudiation (tracking changes to specific accounts).
    • Availability: Ensuring data is accessible when needed.
  • Defense in depth: Implementing multiple levels of protection, such as diversifying equipment vendors.
  • Frameworks:blueprints for security developed by NIST and CIS.
  • IT Security Domains:
    • Users: Often cited as the weakest link in security.
    • Workstation: Includes desktops, laptops, and the Internet of Things (IoT).
    • LAN and WAN: Local and wide area infrastructures; WANs may include SCADA systems.
    • Remote Access: Focuses on securing data in transit.
    • System: Covers server operating systems and database servers.

Questions & Discussion

  • Which area of information assurance is the most important for organizations?
  • What are some real-world examples of insider threats seen in society?
  • In what ways do ethical hackers provide a benefit to society?
  • How do you distinguish between the darknet and the deep web?
  • What was the motivation behind a recent cyberattack you have heard about?
  • Which hacker motivation is the hardest for security administrators to defend against?
  • How valuable are bug-bounty programs to modern businesses?
  • Which technical and soft skills do you currently possess or wish to acquire?
  • Which security certifications are most valuable for a career in this field?
  • Which part of the CIA triad is the most essential element of security?
  • What security domains would apply to the devices and networks used at your school?