Cyber Security Fundamentals - Lecture 2

Cybersecurity Overview

• Cybersecurity involves protecting computer systems, networks, and data from unauthorized access and threats.
• Essential for safeguarding digital assets by ensuring confidentiality, integrity, and availability.

Importance of Cybersecurity

• Digital transformation increases reliance on technology, necessitating robust cybersecurity measures.
• Cybercriminals continually evolve their techniques, creating new challenges for cybersecurity.
• Cyberattacks can cause significant financial losses for individuals and organizations.
• National security relies on effective cybersecurity to protect critical infrastructure and sensitive information.

Real-World Impacts

Online Banking

• Heavily relies on cybersecurity to secure financial information.
• Threats include phishing, malware, and man-in-the-middle attacks, leading to potential identity theft and credit damage.

Social Media

• Platforms store vast personal information, making them attractive to cybercriminals.
• Risks encompass account takeovers and data breaches, which can result in reputational damage and privacy violations.

Healthcare

• Sensitive patient data necessitates strong cybersecurity practices.
• Threats include ransomware and data breaches, with dire consequences for patient safety and organizational trust.

Consequences of Cyberattacks

• Financial Loss: Direct costs including stolen funds and recovery expenses, alongside indirect costs like reputational damage.
• Identity Theft: Theft of personal information leading to fraudulent accounts and unauthorized transactions.
• Reputational Damage: Loss of trust among customers and adverse media coverage can result in long-term business impacts.

Key Cybersecurity Terminology

• Threat: Potential danger to systems—includes hackers and malware.
• Vulnerability: System weaknesses that can be exploited by threats, such as software bugs or weak passwords.
• Risk: Likelihood of a threat exploiting a vulnerability, emphasized through risk assessment processes.
• Exploit: Code that takes advantage of vulnerabilities, including zero-day exploits which target unknown weaknesses.
• Attacker Types:
  • Hacktivists promote political causes.
  • Cybercriminals pursue financial gain.
  • Nation-states may attack for national interests.

Types of Cyber Threats

Hackers

• Black Hat Hackers: Malicious attackers exploiting vulnerabilities.
• White Hat Hackers: Ethical hackers enhancing security by reporting vulnerabilities.

Malware

• Viruses: Spread by replicating across files.
• Worms: Independent programs that propagate through networks.
• Trojans: Disguised harmful software.
• Ransomware: Encrypts data and demands payment for access.
• Spyware: Monitors user activity for information theft.

Social Engineering

• Manipulative techniques to extract confidential information.
• Common methods include phishing, baiting, and pretexting.

Denial-of-Service Attacks

• Flood systems with traffic to disrupt service.
• Distributed Denial-of-Service (DDoS): Amplified attacks using multiple compromised devices, resulting in significant business disruption.

Conclusion

• Cybersecurity is a critical aspect of modern technology, vital for protecting individual and organizational assets. Understanding threats, vulnerabilities, and the consequences of cyberattacks is essential for effective defense strategies.

This quiz covers the basics of cybersecurity and highlights the importance of information security. It is designed for students in the BSc (Hons) Cyber Security program. Participants will learn fundamental concepts and practices crucial to protecting computer systems.