Computer and Cybersecurity Overview

Computer and Cybersecurity

• Computer Security: Protecting computer systems and information from harm, theft, and unauthorized use. Hardware typically protected using serial numbers, locks, and alarms. Protecting access to information uses various tactics.
• Cybersecurity: The practice of defending computers, servers, and devices from malicious attacks. Also known as information technology security or electronic information security.
• Categories of Security:
  • Network Security: Securing computer networks from intruders (targeted or opportunistic malware).
  • Application Security: Keeping software and devices free of threats; crucial in the initial design phase.
  • Information Security: Protecting data integrity and privacy, both during storage and transmission.
  • Operational Security: Processes and decisions for handling and securing data assets, including user permissions and data storage/sharing procedures.
  • Disaster Recovery and Business Continuity: Defining how an organization responds to a cyber-security incident, restoring operations and information to pre-incident levels.
  • End-User Education: Focusing on people as the weakest link in security, teaching safe practices like deleting suspicious email attachments, avoiding unsecured USB drives, and being cautious of unknown websites and downloads.

CIA Triad

• Confidentiality: Ensuring information is available only to the intended audience.
• Integrity: Protecting information from unauthorized modification.
• Availability: Ensuring information is readily accessible when needed to perform job duties.

Good Security Practices for Individuals

• Install Anti-Virus and Anti-Malware Software: Verify software legitimacy and keep the software up to date.
• Use Strong Passwords: Avoid reusing passwords and change them regularly. Do not save passwords on unsecure devices or websites.
• Log Off Public Computers: Be aware of the security vulnerabilities of using public computers and log off completely when finished.
• Save and Back Up Data: Back up important information regularly, and verify that saved files can be easily restored.
• Limit Social Network Information: Be cautious about personal information shared on social media, and utilize privacy and security settings appropriately.
• Download Files Legally: Avoid peer-to-peer networks and only download from trusted sources to avoid malware.

Malware

• Definition: A collective term for malicious software and programs that perform malicious activities, causing harm to computers.
• Malware Types:
  • Ransomware: Threatens to publish or block data access unless a ransom is paid. Can use encryption to render files inaccessible.
  • Spyware: Steals data from a victim's computer.
  • Adware: Displays unwanted ads.
  • Worms: Self-replicating malware that spreads through a network without requiring a host.
  • Trojans: Disguised malware that seems legitimate, sneaking malicious code/programs onto your device.
  • Botnets: Turn infected devices into a network of bots (zombie computers), controlled by a central server.
  • Virus: Infects files by inserting malicious code. Usually requires the user to run an infected program for execution.

Distribution Channels for Malware

• Download: Unintentional download of malicious software.
• Unsolicited Email: Receiving unwanted attachments/links.
• Physical Media: Using infected physical media (e.g., thumb drives).
• Self-Propagation: Malware's ability to spread on its own to other devices or networks.

Common Computer Fraud Techniques

• Phishing: Sending spoofed emails that appear to be from legitimate companies to trick recipients into providing information (e.g., passwords, credit card details).
• Denial of Service (DoS) attacks: Overloading a server or network with traffic, making it inaccessible to legitimate users.
• Distributed Denial of Service (DDoS) attacks: Coordinated DoS attacks launched from multiple computers.
• Hacking: Breaking into a computer system for various reasons (e.g., stealing data or disrupting services), sometimes with ethical purposes (like identifying vulnerabilities).

Additional Terms

• Firewall: A network security device that monitors incoming and outgoing network traffic, deciding whether to allow or block traffic based on defined security rules.
• Vulnerability: Any weakness in a computer system that a hacker can exploit to gain unauthorized access to data.

Dive into the essentials of computer security and cybersecurity. This quiz covers various aspects including network security, application security, and information security. Test your knowledge on how to protect systems and data from threats and unauthorized access.