SEC‐250 Lecture 1 Notes - danniel-giri/SEC-250 GitHub Wiki

Recent security events: Data Breaches: Affects major companies, such as AT&T, LastPass, and Google. These data breaches affect millions of users and their credentials, as well as financial information. Malware: Malicious software that damages your system. Common types are ransomware, spyware, trojans, and malvertisements. Software Vulnerabilities: software with security vulnerabilities are targeted by attackers so they can exploit it before it is patched. Social Engineering: various forms of phishing Emerging Technologies: AI tools, quantum computing, cloud computing.

Cybersecurity is the method of defending and protecting computers, networks, and data. This includes various methods, processes, tools, behaviors, and policies. All of these cybersecurity policies and technology need to work together in order to successfully protect your systems. Some security concerns if someone finds your ID card are unauthorized access to areas they shouldn't have access to. They also can gain information about you and make purchases, as well as you losing access to services you should have access to. Some solutions to this system are multi-factor authentication. This could include passwords, fingerprints, or a PIN. An example of this is a bank ATM, it requires your card and a PIN, which is a form of multi-factor authentication.

These systems aren't in place because they cost lots of money, are time-consuming, and inconvenient for people to actually use. While security costs money, it doesn't create any profit. Examples: Requires expensive equipment: Firewalls, Antivirus, Security Information & Event Monitoring, which all cost money and expertise to run Slows down processing: Increases time that workers are unable to do productive work, security systems slows down computers. Personnel costs too much for their production time, expertise, and training. ROI =(reduction in risk '$' - cost of control)/cost of control Risks of not caring about security: Identity theft,money, intellectual property, data integrity Certainty: The future is known Risk: Possible futures are known and can be assigned scientific probabilities Uncertainty: Possible futures are known but can only be assigned subjective possibilities Ignorance: Possible futures are unknown or unimagined Things that are vulnerable: Emails, people, security cameras.

Security in day-to-day life: Unlocking your phone using biometrics, logging into accounts using MFA, and using PINs for debit cards.

What security could look like in 2035: Decreased use of passwords, increased use of AI in security systems, and quantum encryption.

How Security is implemented: Cybersecurity is implemented differently at every company and has no one solution. Depends on company budget Physical Security: Guards, locks, dogs, alarms, fences Assets that are being protected: Stored data/data at rest: firewalls, antimalware, encryption, authentication, and patches Transient data/data in motion: firewalls, encryption, data loss prevention

Two Major Approaches: Principle of least privilege, Data encryption

Defense-In-Depth: Using multiple security measures and components on multiple layers. No layer is completely safe. Solution: Secure all layers and devices External Network: Firewalls, intrusion detection systems, and vpns Internal Network: Network segmentation Host: Host-based firewalls, access controls, antivirus software Application: Input validation, authorization, authentication Data: Encryption, private keys, backups, access controls

cybersecurity