WHAT IS CYBERSECURITY?

• Exploring the possible meanings of the term

• Before defense is possible, one must understand:

  • Exactly what security is?
  • How security relates to information security?

Security

• To be free from danger is the goal

• The process that achieves that freedom

• The more secure something is, the less convenient it may become to use

Types of security:

• Physical Security - Protecting physical assets and infrastructure.
• Information Security - Safeguarding information from unauthorised access or alteration.
• Cybersecurity - A subset of information security focused specifically on digital environments.

Definition of Cybersecurity

• Refers to the practice of protecting systems, networks, and DATA from digital attacks.

• Aims: accessing, changing, or destroying sensitive information; extorting money from users; or interrupting normal business processes.

• Implementing effective cybersecurity measures is particularly challenging today? Due to innovative attacking methods

Threat sources for security breaches

There are different threat sources that each can breach different security goals

CIA Triad

• Confidentiality: Access is only by authorised individuals.
• Integrity: Protecting information from being altered or tampered with.
• Availability: Resources are available to those who need them when they need them.

Task-1 (5 mins): Let's find a scenario for each piller of the CIA

• Go to menti.com and use (7100 1974 )

Or

• Scan

Cybersecurity: Terminologies-1

Illustration

Cybersecurity: Terminologies-2

• Vulnerability: A weakness in a system that can be exploited by a threat (e.g., unpatched software).
• Threat: Any potential danger that could exploit a vulnerability (e.g., hackers, malware).
• Risk: The potential for loss or damage when a threat exploits a vulnerability.

Cybersecurity Terminology-2 Cont'

The dynamics of them

Cyber Risk

is the potential that cyberthreats exploit vulnerabilities in information assets, leading to harmful incidents.

• Risk magnitude increases with:
  • Higher asset value
  • Stronger threats
  • More severe vulnerabilities

In most cases, the most practical way to reduce risk is by reducing vulnerabilities through security controls.

Cyber Risk: Basic Equation

Relevant threat that exploits a vulnerability with the consequence that an asset gets harmed

Cyber Risk: Level

• Risk level is the significance of a risk, expressed in terms of the combination of consequences and their likelihood.

• Calculated based on the likelihood of a security incident and the incident’s impacts.
  

The term risk exposure is often used as a synonym for risk level.

Cyber Risk: Level (More)

How an attack(s)happen?

• Go to menti.com and use (7100 1974 )

Or

• Scan

Can you eliminate threats?
Can you protect against vulns?

It's not that easy

• Complex Process: Identifying and responding to threats can be complicated.

• Cost vs. Value: Evaluate if the cost of protection exceeds asset value.

• Optimal Strategy/Strategic Approach: Aim to reduce threats but avoid over-investing in protection beyond asset worth.

• Soluation : Implement layered security controls to mitigate risk

  

Security Controls

Measures used to prevent, detect, or respond to threat scenarios, reducing vulnerabilities and limiting the impact of incidents.

Type of Security Controls

1. Nist CSF
   

2. ISO/IEC 27002
   

The Four P’s of Cybersecurity in ITIL

People, Product, Partner, Process form a holistic framework for managing cybersecurity.

• People: The most vulnerable link-requires skills, roles, and a strong security culture.
• Product: Security technologies (e.g. firewalls) must prevent, detect, and recover from threats.
• Partner: Third-party vendors must provide reliable support and service continuity.
• Process: Security tools are only effective when supported by well-defined procedures.

A secure system needs all four P’s working together.
ITIL (Information Technology Infrastructure Library)

Who Is the Opponent: Threat Actors

"False face must hide what the false heart doth know, MACBETHM"

• Individuals or groups posing a threat to cybersecurity.
• Microsoft Threat Actor Naming

Script Kiddies

• Individuals who lack the knowledge of computers and networks to hack
• Download automated hacking software (scripts) from websites
• Tools used are written by other(more skilled) people

Hactivists/ Hacktivists

Attackers who attack for ideological reasons that are generally not as well-defined as a cyberterrorist’s motivation

• Breaking into a website and changing the contents on the site to make a political statement
• Disabling a website belonging to a bank because the bank stopped accepting payments

Nation State Actors

An attacker commissioned by a government to attack enemies’ systems

• May target foreign governments or even citizens of the government who are considered hostile or threatening.

• Known for being well-resourced and highly trained

• Commonly use Advanced Persistent Threat (APT) to target victims

• Petya and NotPetya
  

Insiders

A person or group within an organisation who has authorised access to sensitive information

• Employees, contractors, and business partners

• Over 58 percent of breaches are attributed to insiders1
  

Task-3: discuss, who is the most dangerous?

• Go to menti.com and use (7100 1974 )
  Or
• Scan

Other Threat Actors

Lab

• Review activities from here.

• Cyber lab student account:

  username : student
  password: Student2