SEC‐250 Lecture 2 Notes - danniel-giri/SEC-250 GitHub Wiki

Key Concepts & Principles:

Objective of InfoSec: Protect information, people, systems, hardware that stores, processes, and transmits data, as well as resources

Consequences of poor InfoSec: Can impact critical infrastructure, businesses, and individuals

Communications security: Network security is extremely important to maintain in order to protect data that is being transmitted Physical security: Attackers can take resources and physical data if they are in unsecured rooms Software security: Securing operating systems, applications, and software tools/utilities Human/Personnel security: Risk awareness, training, motivation

Some threats: malware, ransomware, phishing, insider threats, DDOS, SQL injection Terms: Authorization, authentication, IDS, IPS, server hardening, access controls