Introduction to Cyber Security Lecture Set 01-02

The foundational elements that make up a digital system including the physical components, software, applications, and users.

The central processing unit (CPU), memory (RAM), and input/output (I/O) devices like keyboards, monitors, and storage drives.

Software that manages the interaction between hardware, applications, and users, providing a platform for running programs.

Programs designed for specific tasks, such as word processing, web browsing, or games.

Individuals or entities interacting with the computer system, including people and other machines.

The practice of safeguarding the assets within a computing system, including hardware, software, and data, from unauthorized access, use, disclosure, disruption, modification, or destruction.

A weakness or flaw in a system's security, which could be exploited to gain unauthorized access, cause harm, or disrupt operations.

A potential danger that could exploit a system's vulnerability to cause harm or damage.

An event or incident that occurs when a threat successfully exploits a vulnerability.

Strategies, procedures, and technologies implemented to mitigate or eliminate threats and vulnerabilities.

Can arise from design flaws, implementation errors, or procedural weaknesses, making the system susceptible to attacks.

Can be deliberate attacks by individuals or groups, accidental events, or natural disasters.

Techniques used to deceive or trick users into revealing confidential information or granting unauthorized access, such as email spoofing.

Ensuring that only authorized individuals can access information, maintaining privacy and confidentiality.

Protecting information from unauthorized modification, alteration, or destruction, ensuring its accuracy and integrity.

Guaranteeing timely and reliable access to information for authorized users, enabling efficient operations and decision-making.

Balancing confidentiality, integrity, and availability, as enhancing one aspect may compromise another.

Sophisticated and persistent cyber attacks often carried out by organized groups with the intention of secretly gaining access to sensitive information and systems for extended periods.

Internal security measures limiting user access to specific data based on their roles and privileges.

Use of hardware devices for security, such as firewalls, intrusion detection systems, encryption devices, and access verification tools.

Establishing guidelines and regulations for secure practices, including password policies, access control rules, and incident reporting protocols.

Tangible security measures such as locks on doors, physical barriers, security guards, and meticulous site planning, to deter physical access or damage.

The practice of safeguarding networks, devices, programs, and data from unauthorized access, use, disclosure, disruption, modification, or destruction.

A series of coordinated actions designed to exploit vulnerabilities in a system to gain unauthorized access or cause harm, often targeting sensitive data or critical infrastructure.

The ability of a system to resist, withstand, and recover from cyber attacks or threats.

The process of identifying, assessing, and mitigating potential risks to a system's security.

Measures taken to ensure the confidentiality, integrity, and availability of data, and to protect sensitive information, such as encryption and access control mechanisms.

The practice of preventing unauthorized access to sensitive data, such as customer information or financial records.

A security strategy focused on identifying and mitigating risks, implementing controls, and continuously monitoring and adjusting security posture.

The practice of detecting and responding to cyber attacks in real-time, including incident response, containment, and recovery.