Cybersecurity Basics

What It Is

Malware (malicious software) is any software designed to harm, disrupt, or gain unauthorized access to computer systems. It's a broad term encompassing various threats aimed at compromising data, privacy, or system functionality.

Key Facts

• Virus: A type of malware that attaches itself to legitimate programs or documents. It requires user interaction (e.g., opening an infected file) to execute and spread, often modifying other programs to insert its own code.
• Worm: A standalone malicious program that self-replicates and spreads across computer networks without requiring human interaction. Worms exploit vulnerabilities to propagate rapidly, consuming bandwidth and system resources.
• Trojan (Trojan Horse): Malware disguised as legitimate software. Users are tricked into installing it, after which it performs malicious actions like creating backdoors, stealing data, or downloading other malware.
• Ransomware: A type of malware that encrypts a victim's files or locks their computer system. It then demands a ransom payment (usually in cryptocurrency) for decryption or restoration of access.
• Spyware: Software that secretly monitors and collects information about a user's activities without their knowledge or consent. This data can include browsing history, login credentials, and personal information.
• Adware: Software that automatically displays unwanted advertisements, often in the form of pop-ups, banners, or redirects. While sometimes less malicious, it can be intrusive and compromise privacy.
• Phishing: A social engineering technique where attackers send deceptive emails, messages, or websites to trick individuals into revealing sensitive information like passwords or credit card numbers.
• Denial of Service (DoS): An attack designed to make a machine or network resource unavailable to its intended users. It typically involves overwhelming the target with a flood of traffic or requests.
• Hacking: The act of gaining unauthorized access to a computer system or network, often with malicious intent to steal data, disrupt services, or cause damage.

Exam Traps

Candidates often confuse viruses, worms, and Trojans. Remember: a virus needs a host program and user action; a worm is standalone and self-propagating; a Trojan disguises itself as something legitimate.

Quick Recall

• Virus: Needs host, user action.
• Worm: Self-propagating, no user action.
• Trojan: Disguise, user installs.
• Ransomware: Encrypts files, demands money.
• Spyware: Secretly monitors.
• Adware: Unwanted ads.

What It Is

Security Tools & Practices refer to the technologies, methods, and procedures designed to protect computer systems, networks, and data from digital threats. Their primary goal is to ensure the confidentiality, integrity, and availability (CIA triad) of information, safeguarding against unauthorized access, data loss, and system disruption.

Key Facts

• Antivirus: Software designed to detect, prevent, and remove malicious software like viruses, worms, and Trojans from computer systems.
• Firewall: A network security system that monitors and controls incoming and outgoing network traffic based on predefined security rules. It acts as a barrier between a trusted internal network and untrusted external networks.
• Encryption: The process of converting information or data into a code to prevent unauthorized access. It uses algorithms and keys to scramble data, making it unreadable without the correct key.
• SSL (Secure Sockets Layer) / TLS (Transport Layer Security): Cryptographic protocols that provide secure communication over a computer network. They are widely used for securing web browsing (HTTPS), email, and other data transfers.
• VPN (Virtual Private Network): Extends a private network across a public network, enabling users to send and receive data as if their computing devices were directly connected to the private network. It offers anonymity and security through encryption.
• Two-Factor Authentication (2FA): A security process that requires two different factors for verification before granting access (e.g., something you know like a password, and something you have like a phone for OTP).
• Password Manager: An application that stores and manages passwords for various accounts. It helps users create strong, unique passwords and securely store them, often encrypted.
• Backup: The process of copying data to a separate storage location to protect against data loss due due to hardware failure, cyberattacks, or accidental deletion.
• Patch Update: A software update released by developers to fix bugs, improve performance, or address security vulnerabilities. Regular patching is crucial for system security.
• Digital Certificate: An electronic document used to prove the ownership of a public key. Issued by a Certificate Authority (CA), it verifies the identity of individuals or organizations and enables secure, encrypted communication.

Exam Traps

• Confusing the distinct roles of Firewall (network traffic control) and Antivirus (malware detection). While both are security tools, they address different threat vectors.
• Misinterpreting the primary benefit of a VPN as merely remote access, overlooking its core function of providing encrypted, secure, and often anonymous communication over public networks.
• Forgetting that SSL is technically an older, less secure protocol largely superseded by TLS, though the term 'SSL' is still commonly used in general conversation about secure web connections.
• Underestimating the importance of routine practices like regular patch updates and comprehensive backups, which are fundamental to a robust cybersecurity posture.

Quick Recall

• Antivirus: Malware protection.
• Firewall: Network barrier.
• Encryption: Data scrambling.
• SSL/TLS: Secure web communication.
• VPN: Private network connection.
• 2FA: Double security verification.
• Password Manager: Strong password storage.
• Backup: Data recovery solution.
• Patch Update: Vulnerability fixes.
• Digital Certificate: Identity verification.