Cybersecurity Fundamentals

Study Notes

Types of Cybersecurity Threats

Malware: Software designed to harm or exploit computer systems, including viruses, worms, trojans, and ransomware.
Phishing: Fraudulent emails, texts, or messages that trick users into revealing sensitive information.
Ransomware: Malware that encrypts files and demands payment in exchange for decryption.
SQL Injection: Attacks that exploit vulnerabilities in databases to steal or manipulate data.
DDoS (Distributed Denial of Service): Overwhelming websites or systems with traffic to make them unavailable.

Cybersecurity Measures

Firewalls: Network security systems that monitor and control incoming and outgoing traffic.
Encryption: Converting plaintext data into unreadable ciphertext to protect it from unauthorized access.
Password Management: Securely storing and generating complex passwords to prevent unauthorized access.
Network Segmentation: Dividing networks into smaller, isolated segments to limit the spread of threats.
Regular Updates and Patches: Keeping software and systems up-to-date to fix vulnerabilities.

Cybersecurity Best Practices

Use Strong, Unique Passwords: Avoid using the same password across multiple sites.
Keep Software Up-to-Date: Regularly update operating systems, browsers, and plugins.
Be Cautious with Emails and Links: Avoid suspicious links and attachments, and verify senders before responding.
Use Two-Factor Authentication: Add an extra layer of security to accounts with 2FA.
Back Up Data: Regularly back up important data to prevent loss in case of a breach.

Cybersecurity Frameworks and Standards

NIST Cybersecurity Framework: A voluntary framework for managing and reducing cybersecurity risk.
ISO 27001: A standard for implementing an Information Security Management System (ISMS).
HIPAA: A standard for protecting sensitive healthcare information.

Cybersecurity Careers and Roles

Chief Information Security Officer (CISO): Oversees an organization's cybersecurity strategy.
Security Analyst: Identifies and responds to security threats.
Penetration Tester: Simulates attacks to test an organization's defenses.
Incident Responder: Responds to and contains security breaches.

Description

Test your knowledge of cybersecurity basics, including types of threats, security measures, best practices, frameworks, and career roles. Learn how to protect computer systems and sensitive information from unauthorized access.