Ciberseguridad: Definiciones y Principios Generales (1-16 pags)

Study Notes

Ciberseguridad: Protection of information and communication systems, using appropriate technical and organizational measures.
Seguridad de la Información (IA): A broader framework encompassing physical and personnel security, alongside STIC (Safety Technologies of Information and Communications) security.
Manual de Seguridad STIC (CCN-STIC-400): Defines cybersecurity as a set of measures safeguarding the information processed, stored, or transmitted by information systems to ensure confidentiality, integrity, and availability of the information and the systems themselves.

Confidencialidad: Keeping information secret from unauthorized access. Includes protection during processing, transmission, and storage. Techniques like access controls and encryption are employed.
Integridad: Ensuring information accuracy and preventing unauthorized modifications or deletions. Data integrity and system integrity are key aspects. Methods such as encryption and digital signatures maintain integrity.
Disponibilidad: Ensuring reliable system and data access for authorized users upon demand. Recovery strategies are important for maintaining availability after failures or interruptions. Continuous uptime is critical.

Cibercrimen: Criminal activities on the internet, typically financially motivated. Targets include individuals, organizations, and governments.
Ciberactivismo: Using the internet to promote ideological, political, social, or economic viewpoints. Motivations vary.
Ciberguerra: State-sponsored cyberattacks aimed at destabilizing or disrupting another nation's systems. Aims to gain informational or technological superiority.

Activo: Any resource necessary for an organization's activities, whose unavailability creates a cost or damage.
Amenaza: An unfavorable circumstance potentially harming an asset.
Vulnerabilidad: A flaw in a system allowing an attacker to exploit an asset.
Riesgo: The likelihood and impact of a threat exploiting a vulnerability. Risk measurement involves assessing probability and potential consequence.

Malware: Intentional software or firmware compromising confidentiality, integrity, or availability. This includes viruses, trojans, or worms.
Ransomware: Malicious code encrypting files, demanding payment for decryption.
Phishing: Deceptive attempts to acquire sensitive information.
DDoS: Distributed denial-of-service floods a system with requests, disrupting availability.
Criptojaqueo: Using a victim's computer to mine cryptocurrency without their knowledge or permission.

Descubrimiento: Identifying a flaw in software or hardware.
Utilización: Potential attackers developing exploitation methods
Verificación Inicial: Verifying if the vulnerability is valid and can be reproduced.
Solución: Implementing a fix or workaround by the software developers
Difusión: Making the fix known and widely available
Medidas: Following and implementing the solution to mitigate the vulnerability.

2000-2023: Summarizes major cyberattacks and incidents, illustrating the evolution of cyber threats and technical sophistication. Included are detailed incidents, including DDoS attacks, APT campaigns, and malware outbreaks, with examples including those targeting government, industry, or individuals.

Principios básicos: Traditional approaches to cybersecurity
Nuevos principios: Up-to-date strategies, including zero trust, least privilege, and security-focused design.
Seguridad de infraestructuras: Physical safeguards are crucial to cybersecurity.
Categoría de Seguridad: Classification of security approaches into categories based on the goal of each principle.