Cybersecurity for Absolute Beginners: Essential Concepts

Explore the fundamentals of cyber security and define what it is. Explain why we need cyber security and review state of cyber security in 2021 and 2022 with quantitative data.

Define cyber security as protecting IT systems, networks, devices, and data from unauthorized access and cyber attacks, while noting its ties to privacy and information security and diverse career paths.

Understand why everything is connected and how cyber security protects personal life and organizations from hacker risks, safeguarding information technology infrastructure, data, and customer trust while boosting business productivity.

Explore the 2024 cybersecurity landscape, highlighting rising data breach costs, ai-driven threats, ransomware, phishing, cloud and supply chain attacks, and the global skills shortage.

Explore the hackers landscape by debunking myths about hacking, outlining what hacking isn't, identifying different types of hackers, exploring their motivations, and comparing black hat and white hat hacking methodologies.

Understand what hacking isn’t and why media depictions are unrealistic, then explore the slow, methodical reality of ethical hacking, including black hat vs white hat and core methodologies.

Discover the contrast between black hat hackers and white hat hackers, the bad actors and ethical protectors of IT systems. Gray hat hackers exist but are not covered here.

Explore black hat hacker motivations, from script kiddies to state-sponsored actors, hacktivists, cyber terrorists, and hacking as a service, and their impact on security.

Learn the hacking methodology from open source information gathering and social engineering to fingerprinting, scanning, vulnerability assessment, exploitation, and post-exploitation, plus pre-engagement, scope, and reporting.

Explore the fundamentals of computer networking, learn how networks work, and discover how hackers exploit vulnerabilities, reinforcing network security for IT systems, end-user devices, and servers.

Define a computer network as two connected devices, such as desktops, smartphones, tablets, or IoT devices, sharing resources, with a physical connection (wired or wireless) enabling the logical data exchange.

Learn the basic networking rules and communication protocols that enable networks and the internet to operate, including how origin and destination IP and MAC addresses identify devices.

Explore how computer networking protocols, as rules for communication, enable devices to transfer data using examples like HTTP/HTTPS, POP3, SMTP, IMAP, and FTP within the TCP/IP suite.

Learn the difference between local area networks and wide area networks, with real-world examples from homes, small businesses, campuses, and multinational offices, and why it matters for cyber security.

MAC addresses are physical identifiers burned into network interface cards enabling local area network communication via switches; IP addresses are logical and assigned for routing by operating system or DHCP.

Explore how switches forward within a local area network using MAC address tables. Compare this with how routers route between networks using IP addresses and routing protocols.

Explore the TCP/IP protocol suite, the internet’s core standard developed by the department of defense in the 1970s, with four layers and essential application and transport protocols, and attack vectors.

Demonstrate how the internet works through a LAN example, showing routers, switches, and an internet service provider routing HTTP requests across multiple hops using DNS, TCP, UDP, IP, and Ethernet.

Identify mac addresses and ip addresses on macOS and Windows using ifconfig and ipconfig /all to locate en0, ether, inet, and the physical address with IPv4/IPv6 details.

Explore common malware threats, including viruses, worms, rootkits, and ransomware, and learn how hackers deploy these attacks in real-world scenarios.

Explore viruses and worms, including macro-based viruses activated by opening an Excel file and enabling its macro or by email attachments. Worms autonomously replicate across networks, consuming bandwidth.

Learn how trojan horses disguise malware as desirable software and how logic bombs trigger malicious actions on specific events, such as a script altering a database.

Discover how spyware infiltrates systems with trojan horses, quietly monitors keystrokes and personal data, and how adware shows ads and collects marketing information.

Explore ransomware and how it encrypts files to block access, as in Wanna Cry. Study rootkits, which escalate privileges to a root account and modify core system files for persistence.

Explore mobile malware, malicious software targeting smartphones and tablets on Android and macOS. Identify Trojan horses, spyware, and ransomware, plus how they spread via unofficial app stores and phishing links.

Learn common malware deployment methods used by hackers, such as phishing, social engineering, drive-by downloads, removable USB drives, trojan horses, and misconfigured remote desktop protocol.

Explore additional threats and vulnerabilities beyond malware, including buffer overflow attacks, denial of service attacks, weak encryption attacks, and a variety of other threats.

Learn how zero-day attacks exploit unknown software vulnerabilities before patches exist, and how bug bounty programs enlist white hat hackers to discover issues and supply fixes, exemplified by AT&T's rewards.

Explore how buffer overflows occur when input writes beyond allocated memory, enabling crashes or SQL injections, and learn how data input validation and secure development practices mitigate these risks.

Explore protocol spoofing, including ARP spoofing and DNS spoofing, and learn how attackers misuse TCP/IP vulnerabilities to redirect traffic and intercept data.

Learn how denial of service and distributed denial of service attacks, such as ping of death, flood servers with requests, overwhelm networks, and take services offline via botnets and malware.

Explore how weak encryption vulnerabilities and software exploits enable attacks, illustrated by WEP’s 24‑bit RC4 IV and the EternalBlue SMB flaw behind WannaCry.

Learn about web-based attacks, focusing on SQL injection and cross-site scripting, and how lack of input validation and unsecured web and database servers can expose user data and session cookies.

Explore evil twin and rogue access points, how malicious APs mimic legitimate SSIDs to steal or monitor traffic, with campus and public wi-fi risks and spho device dhcp issues.

Explore social engineering and email based threats, including phone call attacks, email spoofing, and phishing, to understand these threats.

Learn how social engineering, the psychology-driven, non-technical side of cyber crime, uses impersonation and phishing across emails, texts, and calls, plus piggybacking and dumpster diving.

Explore realistic social engineering phone calls that impersonate a fraud department and IT staff, illustrating how easily attackers obtain personal information and credentials.

Learn how social engineering phone calls exploit trust to extract personal data and cancel a credit card, with a realistic example from a fraud department.

a social engineering phone call shows an attacker posing as IT staff to obtain a user's current username and password to reset an account, highlighting credential theft risk.

Identify spam emails and spoofed messages, and recognize phishing attacks across emails, texts (smishing), and calls (vishing). Understand how scam websites and fraudulent urls deceive users.

Explore the basics of cyber security by detailing the CIA triad, defense in depth, least privilege, and risk management to understand how IT security protects assets.

Explore the CIA triad — confidentiality, integrity, and availability — and learn how authentication, access control, encryption, input validation, audit trails, and redundancy safeguard data and maintain system availability.

Defense in depth layers security controls across data, applications, end-user host systems, servers, perimeter networks, internal networks, physical security, and policies to complicate attackers' paths and strengthen overall cyber defense.

Apply the least privilege principle by granting only necessary permissions and using Active Directory groups, account standardization, and restricted SQL select statements to mitigate risks.

Identify and assess IT risks through qualitative risk assessment, using a risk matrix to score threats and vulnerabilities, then apply risk responses—avoid, mitigate, transfer, or accept—to reach an acceptable level.

Build a defense in depth by implementing multi-factor authentication, strong passwords, encryption, VPNs, firewalls, honeypots, and DMZs to secure systems.

Learn how multi-factor authentication adds layers to security by combining something you know (password), something you have (one-time code or smart card), and something you are (biometrics) to deter hackers.

Learn why password complexity matters against brute force attacks, and adopt best practices like using password managers or single sign-on, not writing down or reusing passwords, and changing them regularly.

Hardening endpoints by blocking unused ports and disabling unnecessary services reduces the attack surface. Implement patch management, anti-malware, firewall, encryption, and strong passwords for servers and endpoints.

Explain how encryption uses an algorithm and a key to scramble data, keeping it confidential at rest and in motion, with symmetric encryption using same key to encrypt and decrypt.

Firewalls filter data packets and enforce rules to protect your internal network from internet threats, enabling defense in depth with network-based and host-based options.

Explore intrusion detection systems and intrusion prevention systems with firewalls to boost defense in depth; show how IDS logs and notifies, while IPS actively blocks attacks.

Expose public services in a DMZ perimeter network to securely separate untrusted internet users from the internal network using a three-legged firewall design.

Learn how honeypots function as decoy servers in the DMZ to lure attackers away from real networks. Observe attacker behavior, understand hacking techniques, and strengthen defenses based on those insights.

Understand how a VPN creates an encrypted tunnel between a client and server for privacy and anonymity, enabling censorship bypass; traffic beyond the VPN server uses HTTPS.

learn how wireless signals propagate over the air, why encryption matters, and how WPA2 and WPA3 with 802.1x enterprise authentication protect home and business networks.

Explore built-in host-based firewalls on Mac OS and Windows, learn to access, turn on or off, and configure apps and granular inbound rules for ports and protocols.

Explore how businesses implement cyber security in the workplace, covering change management, patch management, incident response, security assessments, training and awareness, and policies and procedures.

Learn how patch management tests, deploys, and audits patches across testing systems to production, and how change management uses a change control board to approve major IT changes for security.

Explore the incident response lifecycle—from detection and containment to recovery, remediation, and lessons learned—to identify and remediate cyber security incidents.

Embed security into the software development lifecycle by integrating security requirements and testing, creating a secure SDLC; apply static code analysis and dynamic testing to identify vulnerabilities and guide fixes.

Explore security assessments, including vulnerability tests, policy reviews, change and configuration management, and network design audits, with a focus on identifying weaknesses and providing improvement recommendations.

Implement and formalize an information technology risk management program by establishing an RMP, risk assessment and escalation processes, a risk PMO, and management buy-in to drive risk awareness and governance.

Implement formal personnel policies to enforce cyber security, including acceptable use, a code of ethics, and separation of duties, reducing insider risk and ensuring continuity.

Enhance your organization's cyber readiness with ongoing, role-based awareness and tailored training for management, staff, and specialists, covering social engineering, phishing, insider threats, and AWS security fundamentals.