Cyber Security 2020: Beginners Guide to Cyber Security™

Explore the CIA triangle: confidentiality, integrity, and availability. Learn how these core security concepts guide information security policies in organizations.

Confidentiality restricts access to authorized users, classifies data by potential damage, and uses encryption and two-factor authentication, biometric verification, and digital certificates to protect information.

Maintain integrity by ensuring trustworthiness, consistency, and accuracy across the data life-cycle. Protect in transit with permissions, access controls, cryptographic checksums, and backups to prevent unauthorized changes and enable restoration.

Ensure reliable access to sensitive data through availability strategies, including hardware and software maintenance, system upgrades, backups in geographically separated locations, redundancy, failover, clustering, and disaster recovery planning.

Explore how cyber crime evolved from damaging computers to financial attacks, driven by wider internet access since 1996, and learn its definition and classification.

Insider attack shows how a dissatisfied insider with internal access can compromise networks and steal sensitive information, highlighting policy gaps and the need for internal intrusion detection system IATSE.

Explore external attacks in cyber security, where attackers outside the organization exploit networks, causing financial and reputational damage, and how firewall logs and intrusion detection systems help trace them.

Explain what a black hat hacker is and how unauthorized entry and exploitation of systems occur to steal passwords and financial data.

Discover the types of hackers, their motives, and how they seek to exploit security systems, find flaws and weaknesses, with upcoming videos covering these hacker types.

Learn how white hat hackers strengthen security with permission, follow rules of engagement, and use ethical hacking tools to disclose vulnerabilities before attackers exploit them.

Explore gray hat hackers who hack without malicious intent to disclose vulnerabilities to administrators, bridging white and black hat methods, and occasionally extorting for vulnerability fixes.

Malware is malicious software designed to damage devices or steal data. Hackers profit by spreading spyware and ransomware, often via the dark web, and sometimes for protest or security testing.

Spyware is malware that secretly infiltrates devices to steal sensitive information and monitor browsing habits.

Explore adware and advertisement-supported software, including how ads may be bundled or third-party sponsored, and how data collection, redirects, and performance impact pose security concerns.

Learn how browser hijacking occurs when free software installs unwanted toolbars, adware, or spyware. Identify signs like unrelated search results and pop-ups, and explore removal with antivirus scans.

Explore how computer viruses are malicious code that damage systems, replicate across hosts, and spread via emails, attachments, and downloads. Learn basic protection with antivirus and cautious file handling.

learn how computer worms self-replicate and spread across networks without human intervention, exploit vulnerabilities via emails and attachments, and how to detect and protect with updates.

Learn how trojan horse malware masquerades as useful software, tricks users via email or downloads, and creates backdoors, botnets, and remote control to steal data.

Explore how cyber crime uses the internet and smart tech to steal personal, corporate, and government data, with three major categories: property, information distribution, and cyber terrorism.

Cyber stalking constitutes a serious crime enabled by technology, involving online harassment and identity theft; protect yourself with privacy settings, strong passwords, logout practices, and antivirus.

Examine software piracy, its offenders, the 2013 unlicensed software rate, piracy methods like soft lifting, hard disk loading, renting, and internet piracy, and how end-user license agreements protect software.

Learn how phishing uses email, phone, or text to steal usernames, passwords, and credit card data, and how to prevent it with spam filters, secure browsers, and ssl.

Explore computer hacking as modifying hardware and software to achieve goals outside the creator's original purpose, including finding and fixing security vulnerabilities, with hackers that can be legal or illegal.

Learn how creating and distributing viruses on the internet constitutes cyber crime and causes financial losses. Recognize legal consequences and downtime impact, and avoid engaging in such activity.

Explore how spamming constitutes cybercrime by sending unsolicited, commercial bulk messages; learn about mass mailing, anonymity, and how unsolicited emails overload networks and mailboxes.

Examine how hackers gain access to organizational websites, alter or block content to push political or social agendas, and review real-world web hacking cases for cyber security basics.

Understand how a salami attack uses tiny, unnoticed increments to accumulate a large sum. See an online banking example where many withdrawals under 1000 rupees go unreported.

Explore the threat landscape as a dynamic space driven by tools to exploit vulnerabilities and a changing knowledge base. See how NASA, ENISA, NIST reports shape awareness of evolving threats.

Differentiate structured and unstructured cyber attacks, explaining how unrestricted attacks rely on free tools with no environment knowledge, while structured attacks are highly planned, targeted, and demonstrate attacker skill.

Explore how social engineering targets the human weakest link, exploiting users’ lack of knowledge through impersonation, phishing, and spear phishing via authentic-looking web portals to extract data.

Understand how a distributed denial-of-service attack uses a botnet of compromised devices, including IoT devices, to flood traffic and overwhelm the target's server resources.

Explore how a man-in-the-middle attack intercepts and decrypts data, using unsecured Wi-Fi, spoofing, and phishing to steal login credentials and cookies. Learn forms like man-in-the-browser and SSL hijacking.

Explore how infected computers form a botnet under command-and-control by attackers. Update malicious programs to sustain botnets and enable multi-purpose tools.

Learn how cross site scripting exploits flaws in web applications through poor input validation, enabling attackers to inject malicious scripts and compromise users via stored or reflected attacks.

Learn how sql injection exploits insecure input fields to access or alter databases and even run commands remotely. Use input validation, standardization, and sanitizing and filtering to prevent these attacks.

Explain authentication as identifying users and granting access through factors like username and password, plus one-time password, biometrics, or tokens, with strong passwords and hybrid virtual private network security.

Explore how encryption locks data by converting it to a complex code, using symmetric and asymmetric keys; learn about key distribution and public/private keys to secure internet transmission.

Explore how digital signatures validate data and authenticate senders by encrypting with a private key and verifying with a public key to detect tampering.

Learn how antivirus protects computers by preventing, detecting, and destroying malware such as viruses and worms, with regular database updates to immunize systems against evolving threats.

Learn how viruses differ from normal programs by intent, and how antivirus software uses signatures and scans its database of definition files to catch new strains.

Explore the five-layer model of networking, from the physical layer and cables to the network, transport, and application layers, and understand how these protocols enable communication.

Explore the physical layer by examining the physical protocol, cables, connectors, and devices that interconnect computers, and understand how signals are sent over these connections.

Explore the data link layer, detailing Ethernet and Wi-Fi frames, MAC addresses, and how the Internet standard enables data delivery to nodes on the same network.

This lecture describes the transport layer, including dcpi (tcp) and european user data protocol, and explains how data is delivered to the correct application across nodes by ip.