Untitled

• Computer security protects computers, data, networks, software, and hardware from unauthorized access, misuse, theft, and information loss.
• While the Internet offers many advantages, it also introduces risks like viruses, hacking, information theft, and system damage.

Three Key Objectives of Computer Security

• Confidentiality: Restricting information access and disclosure.
  • Data confidentiality assures private information is not disclosed to unauthorized individuals.
  • Privacy ensures individuals control the collection, storage, and disclosure of their information.
• Integrity: Guarding against improper information modification or destruction.
  • Data integrity ensures information and programs are changed only in an authorized manner.
  • System integrity ensures a system performs its intended function without unauthorized manipulation.
• Availability: Ensuring timely and reliable access to information, so systems work promptly and service is not denied to authorized users.

Types of Computer Security

• Cyber Security: Securing computers, devices, networks, programs, and systems from cyberattacks that occur when the system is connected to the Internet.
• Information Security: Protecting system information from theft, illegal use, and piracy, with the objectives of confidentiality, integrity, and availability.
• Application Security: Securing applications and data to prevent hacking, keeping databases safe and private.
• Network Security: Securing a network and protecting user information from hackers who steal data through sniffing, spoofing, and man-in-the-middle attacks.

Steps to Ensure Computer Security

• Keep the Operating System up to date to reduce the risk of malware and viruses.
• Use a secure network connection, avoiding public Wi-Fi's that are at risk of attacker interception.
• Install and update antivirus software, opting for paid versions for more security.
• Enable a firewall to prevent unauthorized access to/from a computer or private network.
• Use strong, unique passwords of at least 16 characters combining upper and lower case letters, numbers, and special characters, changing them regularly.
• Limit trust in others to avoid giving out personal information.
• Keep personal information hidden and avoid sharing with strangers on social media.
• Avoid downloading attachments from unknown e-mails, as they often contain malware.
• Purchase online from well-known websites to avoid fraud and card information theft.
• Learn about computer security and ethics to reduce cyber-crime.
• If attacked, immediately inform the cyber cell.
• Avoid pirated content, which often contains viruses, worms, or malware.

Application Security

• Application security is important for organizations handling customer data to mitigate data breach risks.
• Application security includes testing code, identifying vulnerabilities, and ensuring applications are free from security flaws.
• Application security can be implemented at various stages of the software development life cycle, from planning to deployment.
• Key features include:
  • Code review and vulnerability scanning
  • Use of secure coding practices
  • Implementation of secure authentication and authorization mechanisms
  • Regular security testing and update
• OWASP tracks the top 10 threats to web application security flaws.
• Different types of application security features include authentication, authorization, encryption, logging, and application security testing.
  • Authentication: Software procedures ensure only authorized users gain access, using username-password or multi-factor authentication.
  • Authorization: Validating that an authenticated user has permission to access and use the application.
  • Encryption: Security measures protect sensitive user data, especially in cloud-based applications.
  • Logging: Can help identify who got access to the data and how if there is a security breach in the application.
  • Application Security Testing: A necessary process to ensure that all of these security controls works properly.

Cloud Security

• Securing cloud computing becomes a major priority as organizations adopt it.
• A cloud security strategy includes solutions, controls, policies, and services to protect cloud deployments against attack.
• Cloud security protects data and systems hosted on cloud platforms like AWS, Microsoft Azure, and Google Cloud.
• Cloud security includes technical and administrative controls to secure stored data and the cloud infrastructure.
• Key features of cloud security:
  • Use of secure cloud configurations and virtual private networks
  • Implementation of identity and access management controls
  • Encryption of data at rest and in transit
  • Regular security audits and compliance checks
• Responsibilities in cloud security:
  • Infrastructure as a Service (IaaS): You secure data, applications, virtual network controls, operating system, and user access; the provider secures compute, storage, physical network, patching, and configuration.
  • Platform as a Service (PaaS): You secure your data, user access, and applications; the provider secures compute, storage, physical network, virtual network controls, and operating system.
  • Software as a Service (SaaS): You are responsible for securing your data and user access; the provider secures compute, storage, and the physical network.
• Types of cloud security solutions:
  • Identity and access management (IAM): Administering who has access to cloud-based and on-premises resources, allowing active monitoring and restriction of user interactions.
  • Data loss prevention (DLP): Gaining visibility into stored data and automatically discovering, classifying, and de-identifying regulated cloud data.
  • Security information and event management (SIEM): Offering automated monitoring, detection, and incident response to threats using AI and ML to analyze log data.
  • Public key infrastructure (PKI): Managing secure, encrypted information exchange using digital certificates and providing authentication services.
• The full scope of cloud security is designed to protect the following: physical networks, data storage, data servers, computer virtualization frameworks, operating systems, middleware, runtime environments, data, applications, and end-user hardware.
• Cloud service types are offered by third-party providers as modules used to create the cloud environment.
• Cloud environments are deployment models in which one or more cloud services create a system for the end-users and organizations.
• Currently used cloud environments include:
  • Public: multi-tenant services where clients share servers with other clients.
  • Private third-party: Cloud service that provides the client with exclusive use of their own cloud.
  • Private in-house: Single-tenant service servers operated from their own private data center.
  • Multi-cloud: Two or more cloud services from separate providers.
  • Hybrid: Blend of private third-party cloud and/or onsite private cloud data center with one or more public clouds.
• Cloud security measures enable data recovery and protect storage and networks against malicious data theft.
• Cloud security measures deter human error and reduce the impact of data compromise.
• Data security involves the technical end of threat prevention with tools and technologies to insert barriers.
  • Encryption scrambles data so it's only readable by someone with the encryption key.
  • Data transit protections like VPNs are also emphasized.
• Identity and access management (IAM) pertains to accessibility privileges offered to user accounts; access controls restrict both legitimate and malicious users.
• Governance focuses on policies for threat prevention, detection, and mitigation.
• Data retention (DR) and business continuity (BC) planning involve technical disaster recovery measures in case of data loss.
• Legal compliance revolves around protecting user privacy as set by legislative bodies.
• One approach is data masking, which obscures identity within data via encryption methods.

Data Security

• Data security is the process of safeguarding digital information to protect it from corruption, theft, or unauthorized access.
• Covers hardware, software, storage devices, user devices, access and administrative controls, & organizations' policies and procedures.
• Enhances visibility of a company's data and its usage through data masking, encryption, and redaction.
• Helps organizations streamline their auditing procedures and comply with stringent data regulations.
• Why data security is important:
  • Organizations are legally obliged to protect customer and user data from loss or theft.
  • Prevents reputational risk that accompanies data breach.
• Benefits of Data Security
  • Keeps your information safe
  • Helps keep your reputation clean
  • Gives you a competitive edge
  • Saves on support and development costs
• Best Practices for Ensuring Data Security And Privacy
  • Secure your information: manage access and encrypt your data
  • Prepare ahead of time for threats: test your system, educate employees, create an incident management plan, and create a data recovery plan
  • Delete data you are not using: reduce the chances of a hacker discovering it and using it for profit
• Types of Data Security
  • Encryption: Scrambles data using algorithms to hide its true meaning, which is crucial in the event of a data breach.
  • Data Erasure: Data Security management technique that permanently removes data from systems.
  • Data Masking: Hides data by obscuring and replacing specific letters or numbers, rendering the data useless if intercepted.
  • Data Resiliency: Mitigates accidental data destruction or loss through backups.

Endpoint Security

• Endpoint management refers to the monitoring, managing, and securing the endpoints in a network and applying policies to control the access to these endpoints.
• Secures endpoints from internal and external cyber threats.
• Unified endpoint management and security tool is a combination of Client Management Tool (CMT) and Enterprise Mobility Management (EMM).
• Organizations of all sizes are at risk from nation-states, hacktivists, organized crime, and malicious and accidental insider threats.
• Endpoint security is often seen as cybersecurity's frontline.
• Endpoint protection systems quickly detect, analyze, block, and contain attacks in progress.
• Key Components of Endpoint Security
  • Machine-learning classification to detect zero-day threats in near real time
  • Advanced antimalware and antivirus protection to protect, detect, and correct malware across multiple endpoint devices and operating systems
  • Proactive web security to ensure safe browsing on the web
  • Data classification and data loss prevention to prevent data loss and exfiltration
  • Integrated firewall to block hostile network attacks
  • Email gateway to block phishing and social engineering attempts targeting employees
  • Actionable threat forensics to allow administrators to quickly isolate infections
  • Insider threat protection to safeguard against unintentional and malicious actions
  • Centralized endpoint management platform to improve visibility and simplify and simplify operations
  • Endpoint, email and disk encryption to prevent data exfiltration

IOT Security

• IoT Security is based on a cybersecurity strategy to defend against cyberattacks on IoT devices and vulnerable networks.
• Security was not considered during the design of IoT devices.
• IoT security is a technology area to protect connected devices and networks in IoT
• Attacks are likely to occur to anything linked to the Internet at some time.
  • From the Internet of Things devices, Attackers may utilize remote access to steal data using strategies, including credential theft and vulnerability exploitation.
• Types of IoT Security
  • Network security safeguards the overall IoT network infrastructure. - Establish perimeter via firewalls and intrusion detection systems
    • Enforcing zero-trust architecture and continuous verification
      • Securing network communication by encrypting data and communications
  • Device Security Centers on protecting individual IoT devices:
    • Employing lightweight software to monitor device behavior and detect anomalies.
    • Firmware hardening via rigorous testing and updates. -Verifying the device's operating system before startup.
  • Data Security safeguards information generated and transmitted by IoT devices via:
    • Data encryption
    • Implement measures to protect sensitive information from unauthorized access.
    • Ensuring data accuracy and consistency through checksums and other techniques.
• Benefits for IoT Security
  • Network protection which identifies and prevents threats to the IoT as a whole
  • Privacy protection which shields user privacy from surveillance, theft, and device tracking
  • Scalability in that it can keep up with the expansion of various IoT environments
  • Devise protection that ensures lifetime operation by protecting devices from unauthorized access
• Cyberattacks continue due to the unusual way IoT devices are manufactured, emphasizing the need for security.
• Challenges
  • Lack of encryption across IoT devices raises security concerns
  • Security misconfigurations of devices create a malfunction
  • Devices often lack the processing capacity for security programs
• Industries Most Vulnerable to IoT Security Threats
  • Manufacturing dependencies: Manufacturing has become a target due to dependency on chain systems
    • Includes issues like stealing data and creating vulnerabilities that exploits and interrupts operations
  • Finance threats includes stealing financial data for competitive advantage - Includes cyber attacks disrupting services entailing huge loss
  • Potential threats in energies that disrupts power generation or transmission - Espionage and attacks on infrastructures cause operation disruptions
  • POS and data breaches makes Retail a more threatening industry
  • Cybercriminals stealing healthcare information and medical devices for vulnerabilities - Includes medical device vulnerabilities for data theft Public security sensitive to security threats that attack reputation
    • Cyber spying to cause disinformation and attacks

IoT Device Vulnerability

• Weak Passwords: IoT devices have weak default passwords that can be easily guessed
• Smart Speakers: Can be hacked through voice recordings
• Smart TVs: Vulnerable to malware, data breaches, and adware
• Data breaches for smartwatches and fitness trackers

Mobile Security

• Mobile device security keeps devices safe from cyber criminals and hackers, protecting private information.
• Protection is set together to prevent unauthorized users from accessing devices
• Mobile security protects data on devices, endpoints, and networking hardware
• How to secure mobile devices for your organization:
  • Being informed and educating one's self is one of the most effective way to defend against mobile threats
  • Use two-factor authentication and strong passwords to always make the extra effort to protect your data.
  • Encrypt is the best way to protect your data if your device is potentially lost
• Components:
  • Testing with automated services to pinpoint weakness
  • Connecting to public wifi safely
  • Installing apps from trusted providers and software

Network Security

• Network security is a broad phrase that protects data data companies through solutions that minimizes cyber threats
  • Network usage that has procedures, guidelines, and setups is general threat protection
  • Examples include protection and user password protection
• Security solutions protects various vulnerabilities of the computer systems
• Action has intended actions to network security
• Types of network security
  • Defined to protect from access
  • Program restricts losing essential data if compromise
  • Segmentation to allow appropriate individuals the device
  • Access to protect every user in order to keep out attackers
• This can be achieved by biometric systems that prevents unauthorized personnel
• Network security protects user behavior with complex attacks
• The most danger vector for security is email which restricts the amount of threatening message