Introduction to Cyber Security

University of Wollongong in Dubai

• The University of Wollongong is located in Dubai.

Learning Objectives

• Define Cyber Security
• Importance of Cyber Security
• Nature of Cyber Attacks
• Different types of attacks, Cyber Threats
• Common Sources of Cyber Threats
• Prevention of cyber attacks
• Attacks repair and Detection Techniques

Cyber Security

• Cybersecurity is the practice of defending computers, servers, mobile devices, electronic systems, networks, and data from malicious attacks
• Also known as information technology security or electronic information security
• The term "cybersecurity" applies in a variety of contexts, from business to mobile computing, and can be divided into a few common categories

Types of Cyber Security

• Network security is the practice of securing a computer network from intruders, whether targeted attackers or opportunistic malware
• Application security focuses on keeping software and devices free of threats
• Information security protects the integrity and privacy of data, both in storage and in transit
• Operational security includes the processes and decisions for handling and protecting data assets
• Disaster recovery and business continuity define how an organization responds to a cyber-security incident or any other event that causes the loss of operations or data

Why is Cybersecurity Important?

• In today's digital world, one cannot ignore cybersecurity
• One single security breach can lead to exposing the personal information of millions of people
• These breaches have a strong financial impact on the companies and also loss of the trust of customers
• Cyber security is very essential to protect businesses and individuals from spammers and cyber criminals
• According to Cybercrime Magazine, cybercrime will cost the world $10.5 trillion annually by 2025!
• Global cybercrime costs are predicted to rise by almost 15 percent yearly over the next four years
• Concepts like the pandemic, cryptocurrency, and the rise in remote working are creating a target-rich environment for criminals

Cyber Threats

• Cybercrime is defined as any unauthorized activity involving a computer, device, or network
• Cyber criminals typically target systems for three reasons:
  • To invade privacy
  • To compromise the trustworthiness of data
  • To deny access to information
• In some threats (like computer-assisted crimes), the computer itself is a target, while in others, the computer is incidental
• Common Cyber Threats include:
  • Cyberterrorism
  • Malware (ransomware, spyware, viruses, worms)
  • Botnets
  • Adware
  • SQL injection
  • Phishing
  • Man-in-the-middle attack
  • Denial of Service
  • Social Engineering Based Attacks

Other Cyber Threats

• Cyberterrorism: politically-based attacks on computers and information technology to harm and disrupt society
• Malware: encompasses harmful software, including ransomware, spyware, viruses, and worms
• Trojan: tricks users into downloading a harmless file, but then allows access to cybercriminals
• Botnets: large-scale cyberattacks conducted via remotely controlled malware-infected devices
• Adware: a form of malware that displays unwanted advertisements
• SQL injection: a code injection technique inserted into SQL-using servers
• Spear phishing: targeting specific individuals in an organization to steal credentials; attackers gather information beforehand
• Vishing: voice phishing - someone uses the phone to steal information
• Email phishing: attackers send emails that appear legitimate to trick recipients into entering information
• Pharming: malicious code installs on a computer and redirects the victim to a fake website
• Evil twin attack: hacker sets up a false Wi-Fi network to capture sensitive data
• Watering hole phishing: a hacker identifies a frequented site to infect visitor computers
• Whaling attack: phishing attack targeting senior executives
• Social engineering attacks: manipulating individuals psychologically to reveal sensitive information
• Smishing: phishing via text messages

Common Sources of Cyber Threats

• Nation states
• Terrorist organizations
• Criminal groups
• Hackers/Hacktivists
• Malicious Insiders

Further information on Cyber Threats

• Nation states: hostile countries that conduct cyberattacks to interfere in communications, cause disorder, and inflict damage
• Terrorist organizations: abuse critical infrastructure, threaten national security, disrupt economies, and cause harm
• Criminal groups: organized hackers who break into systems for economic gain, using methods like phishing, spam, spyware, and malware to extort, steal information, or carry out online fraud
• Hackers/Hacktivists: individual hackers who target organizations for personal gain, revenge, or political reasons, often creating new threats and improving their standing
• Malicious Insiders: employees, suppliers, or partners who have legitimate access to company assets but abuse privileges to steal information or damage systems for personal or economic gain

Key Cybersecurity Technologies

• VPN connections for improved privacy
• Double-checking HTTPS on websites
• Removing adware from computers
• Disabling Bluetooth when not in use and avoiding public networks
• Investing in security upgrades
• Employing white hat hackers
• Password managers
• Multi-factor authentication
• Installing anti-virus software
• Secure devices via passwords/gestures/fingerprints
• Ensuring up-to-date software updates

Common Strategies for Cyber Attack Prevention

• Self-training
• Anti-malware and spam filter software
• Vulnerability assessments
• Routine penetration testing
• Ensuring up-to-date software and systems
• Managing Endpoint Protection
• Installing a Firewall
• Backing up data
• Controlling system access

Attacks repair and Detection Techniques

• Enhancing security features such as passwords, multi-factor authentication, and secure email gateways
• Maintaining a watchful spam email folder
• Update software regularly
• Create a culture of cyber security awareness
• Security awareness training for client organizations
• Act quickly and efficiently if a cyberattack is detected, implementing a data breach response plan
• Notify relevant parties (victims and authorities)
• Restore/replace data—potentially using an IT forensic team
• Adapt to prevent future attacks; identifying vulnerabilities, seeking training, evaluating software updates
• Locate source and actively block malicious activity

Attack Detection Techniques

• Intrusion Detection Systems (IDS)
• Intrusion Prevention Systems (IPS) which builds on the former by proactively preventing attacks
• Firewalls that scrutinize incoming and outgoing network traffic
• Security Information and Event Management (SIEM) for centralized monitoring
• Endpoint Detection and Response (EDR) solutions monitoring and responding to cyberattacks
• Advanced Detection such as anomaly detection
• Threat Intelligence by gathering data from various sources
• Security Assessment using penetration testing to identify and exploit vulnerabilities

References

• URLs provided in the slides are included for referencing

This quiz dives into the fundamental aspects of cyber security, covering definitions, types of cyber attacks, and prevention techniques. Understand the importance of safeguarding digital assets against threats and learn about common sources of cyber threats. Explore different categories of cybersecurity to enhance your knowledge in this essential field.