Cyber security fundamentals | Understanding Cybersecurity Basics | Edureka Rewind

Key Takeaways

today's interconnected world makes everyone more susceptible to cyber attacks whether you are attracted to this relatively new world of cyber security as a professional or you are just interested in protecting yourself online you must have a solid understanding of cyber security hey guys I'm archa from Eda and I welcome to this session on cyber security so without any delay let's go ahead and take a look at topics that we will be talking about in this session so guys we will Begin by having a brief discussion on what is the need for cyber security then we will take a look at what cyber security actually is and then discuss its fundamental concepts and finally we will see how cyber security is ured with the help of real world scenario so I hope agenda was clear to you guys let's get started then and turn it today informs entertains and connects us it's the backbone of global economy our devices which are connected through this internet and other networks open up a world of possibilities in front of us for example we can access information we need without having to keep it on our devices permanent we can easily communicate with others who are on the other side of the world without any glitches these connected devices form the network that help us to run our lives but these connections also leave our devices vulnerable to damage and our information vulnerable to theft for example cyber criminals are in business of stealing sensitive data like contact numbers credit card information Bank Account Details that they sell to third parties for profit and then there are malicious hackers with personal enmity hack into systems to expose the host vulnerabilities the activist inspired by their political and social activism hack systems opposed to their ideology and mindset so guys making use of these vulnerabilities that are present in internet's architecture people are trying to initiate attack in the cyers space we call them cyber attacks now let's take a look at few popular cyber attacks that have terrorized the world till now to begin with there is malware well if you have ever seen an antivirus alert pop up on your screen or if you have mistakenly clicked on malicious email attachment then you have had a close call with malware malware basically is a term which is used to describe malicious s software including spyware viruses WS different kind of troin that are injected into your computer to corrupt it and then there is something called fishing in a fishing attack an attacker may send you an email that appears to be from someone you trust like it could be your boss or company that you do business with in this email you will find an attachment to open or a link asking for you to click on and as soon as you do that you're giving Le for attacker to exploit your computer and then there is man in the middle attack it is also known as Eve dropping attack here attacker inserts himself as a third party into a two-party transaction once the attacker interrupts the traffic he can easily filter manipulate and steal your data without you knowing anything about it moving on we have denial of service attack here attacker floods a website with more traffic than it can handle this will make it impossible for the website to respond to legitimate visitors who are trying to access it and then there is malvertising it is the use of online advertising to spread malware it typically involves injecting malicious advertisements into legitimate online advertising networks and web pages and finally there is ransomware ransomware basically is a type of malware that prevents users from accessing their system or personal files if the user want to regain access then he'll have to pay the ransom that the attacker is demanding and today most of the time ransomware criminals order that payment be sent via cryptocurrency or credit card so Guys these are just few major type of cyber attacks that are there there are others out there that are traumatizing the cyber space cyber crime is a global problem that's been dominating the new cycle it poses a threat to individual security and even bigger threat to Lodge International La companies organizations Banks and government but the good thing is that even with this flawed internet there are simple things that we can do to protect ourselves from these attacks this is where cyber security comes into picture in simple terms cyber security is defined as techniques and practices designed to protect your data and when I say data I mean Digital Data that is stored transmitted and used on an information system after all this is what criminal wants right the data the network servers computers and other online Gadget are just mechanisms to get this data ensuring cyber security requires the coordination of efforts throughout an information system and this includes application security it mainly focuses on keeping software and devices free from cyber threats and then there is information security it is basically protecting the integrity and privacy of data so you're protecting organizations from possible data breaches here and then there is network security it is practice of securing a computer network from Intruders whether it could be targeted attackers or simple malware moving on there is operational security it includes all the processes for handling and protecting data assets the permissions which users usually have when they're accessing a network and the procedures that determine how and where data must be stored and shared all fall under this category and then there is disaster recovery and business continuity that Define how an organization responds to a cyber security incident or any other event that causes the loss of operation and data and finally the most important thing end user as education IT addresses the most unpredictable cyber security factor which is people teaching users to delete suspicious email attachment not plug in unidentified USB drivers and various other important lessons is very vital for the security of any organization that there is so guys earlier I said that cyber security is set of techniques and practices employed to protect data but what are we actually protecting data here from we are protecting data from unauthorized access unauthorized modification and unauthorized deletion these three terms are similar to what we know as CIA Triad and cyber security CIA basically stands for confidentiality integrity and availability now let's explore the CIA trial so confidentiality is exactly what it sounds like keeping your information secret it is the protection of information from unauthorized people and processes let's consider a simple example would you like the thought of your private health information or financial information falling into some strangers hands who definitely not right similarly no business owner likes the thought of a business information being disclosed to competitors information is a valuable asset Integrity is when the information that is stored in a system is very accurate and highly reliable Integrity is protection of information from intentional or accidental unauthorized modification for example if if a hacker were to break into a banking website and change his balance from $1 to $1 million Integrity of site is now lost the final component of CIA Triad is availability availability is assurance that systems and data are accessible by authorized users whenever they need it so if it cannot access the data whenever we need it we are definitely not secure so guys now you know what CIA tried basically means now let's take a look at what kind of attacks can be made on the CIA Tri in real world and how we can defin them let's begin with confidentiality attacks and confidentiality include cracking poorly encrypted data an employee knowingly or unknowingly putting sensitive data on removable media such as SD cards pen drives and giving it to unauthorized parties and then there is doxing which is basically leaking private information about an individual or an organization in order to do home now the best way to keep your information secret is to make sure that there is strict access control that is only people who are allowed to access data can access it and another way is to encrypt any data that's being transmitted from one position or one place to another now Integrity a tax on Integrity include penetrating a web server in order to embed malware into web pages to corrupt the system or maliciously accessing the financial server in order to falsify Financial records or hacker turning your machine into a zombie computer so that he can control your computer without you knowing about it and the best way to upload the Integrity is to use cryptography and then ensure intrusion detection well if you're wondering what intrusion detection it it's the act of detecting when hackers can carry out actions that might compromise the Integrity of the system and finally threats you should be aware of when thinking about availability is denial of service attack or distributed denial of service attack we already talked about it earlier basically denial of service attack is one where enemy will flood your computer and internet connection with traffic so that the legitimate users can't access any information that there is on website and there are other attacks as well for example ransomware attack which encryp data on targeted computers so that the authorized parties cannot use it and then deliberately disrupting a server room's power supply so that the servers go offline now few ways you could protect yourself from these attacks are by using antivirus software or you could install spy detection and spy remover soft office as well and you could start using a firewall so guys the CIA Triad is very fundamental Concept in security confidentiality integrity and availability all have to work together to keep your information secure but don't think for one minute that these are the only factors to be considered while talking about security now let's talk about other three pillars of security to begin with the most important concept people and individual it could be me or it could be you play a very important role when it comes to security every employee needs to be aware of their role in preventing and reducing this ever ending cyber attacks the specialized technical cyber security staff need to stay fully update with latest skills and qualifications to mitigate and response to Cyber attack easily so guys people play a very important role when it comes to security moving on we have processes processes are crucial in defining how the organization's activities roles and documentation can be used to mitigate the risk of organization's information and data cyber threats keep changing quickly so processes need to be continually reviewed and updated to be able to ad up with them and finally technology technology plays a very important rule technology can be deployed to prevent or reduce the impact of cyber risk depending on your risk assessment and what you deem an acceptable level of risk so guys now that we are aware of what cyber security is and it's fundamentals let's take a look at real world scenario to understand how cyber security is enjoyed meet Wendy she owns a successful Hotel and Spa because everyone needs an escape from the stressful life once in a while right now being the owner of successful Spa means that her clients are trusting her with their personal information and she uses different kind of Technical Systems to book appointments make payments and keep track of a financial accounts on top of that to keep it all safe she has an elaborate it security system protecting everything but unfortunately it's not secure enough Wendy's business is targeted by hackers who are determined to break and hold a business information hostage because of this Wendy's business has come to a halt she can't make appointments can't process payments and her client's personal information is exposed and on top of that hackers are asking her for a heavy Ransom so what would you do if you are in Wendy's Place well Wendy doesn't want to pay hackers so she decides to hire instant response team from a very popular security company this incident Response Team Mission basically is to prevent serious loss of profits ensure public confidence and protect information assets for business like Wendy's but how does this IRP team actually achieve it so as first step IRP team will identify the source of security breach then IP team orchestrates China of events that ultimately prevents from encountering a serious security disaster they detect logs and access control and contain the threat part so that Wendy's company can avoid further damage after the attack is contained the team identifies the data that has been stolen or compromised during the incident after that the team prioritizes recovery to project Wendy's business from further attacks now Wendy's customers can continue with their spa day without any hazards in the past security Beach of this nature would have required vendy to contact several agencies and third parties to solve the problem in the worst case vendy might have had to pay hackers the amount that demanded for but IRP platform organized all of these people processes and Technology to identify and contain the problem in very limited amount of time so guys today you have reached a position in which cyber crme is so sophisticated it seems almost impossible to prevent the emphasis is now on how an organization responds once it has been breach well we can't prevent every incident that there is we can easily control how we manage the aftermath so that we prepared and practiced in the process of response so this is it guys we have reached the end of the session I hope the session was informative and now you know your role as an individual in uring cyber security in this world well if you have any doubts or any topics that you want to discuss based on cyber security please do post them in the comment section below and we'll get back to you as soon as possible thank you guys meet you in the next session with another interesting topic e e e