CYS401 · Chapter 2 · Annotated SlidesSecurity Foundations and Principles
Original
Overview

Security Foundations and Principles

The three pillars, vulnerability vs. threat vs. risk, malware and the threat landscape, social engineering (phishing, spear phishing, tailgating), the C.I.A. triad with the attacks on each and the methods that protect it, the AAA services, and the protection mechanisms. Final 221 A/B, Quiz 1 222 and Majors A–C all draw on this deck.

How to read this page

Every original slide is shown unchanged. Yellow marks on a slide point to a numbered note: hover or tap a mark to jump to its note, and hover a note to see its marks. Questions tagged Past exam appeared on a real paper; Prediction questions are likely angles, not confirmed. Pick an answer to each question: a wrong pick tells you why it is wrong, so you can try again.

All 34 slides
  1. 1 Cyber Security Foundations and Principles
  2. 2 WHAT IS CYBERSECURITY ALL ABOUT?
  3. 3 WHAT IS CYBERSECURITY ALL ABOUT?
  4. 4 VULNERABILITY, THREAT, COUNTERMEASURE
  5. 5 Risk is exist when you have a threats with a vulnerabilty in the system or in one of the security control.
  6. 6 THREAT DAMAGE
  7. 7 Slide 7
  8. 8 THREATS
  9. 9 Modern Threat Landscape
  10. 10 Threat Vectors/Techniques
  11. 11 TYPES OF MALWARE
  12. 12 Malware Symptoms
  13. 13 Malware Countermeasures
  14. 14 TYPES OF CYBERSECURITY THREATS
  15. 15 TYPES OF CYBERSECURITY THREATS
  16. 16 Slide 16
  17. 17 TYPES OF
  18. 18 SE Counter Measures
  19. 19 SE Counter Measures
  20. 20 AI-Driven Cyber Threat Vectors
  21. 21 WHERE THREATS MAY EXIST
  22. 22 CIA TRIAD CONFIDENTIALITY, INTEGRITY, AND AVAILABILITY TRIAD
  23. 23 CONFIDENTIALITY
  24. 24 ATTACKS FOCUSES ON THE VIOLATION OF CONFIDENTIALITY
  25. 25 ATTACKS FOCUSES ON THE VIOLATION OF CONFIDENTIALITY
  26. 26 METHODS USED TO ENSURE CONFIDENTIALITY
  27. 27 METHODS USED TO ENSURE CONFIDENTIALITY
  28. 28 INTEGRITY
  29. 29 INTEGRITY
  30. 30 AVAILABILITY
  31. 31 AAA SERVICES
  32. 32 ACCESS CONTROL (AAA ELEMENTS)
  33. 33 PROTECTION MECHANISMS
  34. 34 PROTECTION MECHANISMS
Slide 1 / 34

Cyber Security Foundations and Principles

Slide 1: Cyber Security Foundations and Principles

Notes

  1. Tip AAA = five elements: Identification (claim) → Authentication (prove) → Authorization (permissions) → Auditing (record) → Accounting (hold responsible). Phase 1 (getting in): identification, authentication, authorization. Phase 2 (afterwards): auditing, accountability.

Slide 2 / 34

WHAT IS CYBERSECURITY ALL ABOUT?

Slide 2: WHAT IS CYBERSECURITY ALL ABOUT?

Exam angle

PredictionQ1

All of the following are cybersecurity pillars EXCEPT:

Slide 3 / 34

WHAT IS CYBERSECURITY ALL ABOUT?

Slide 3: WHAT IS CYBERSECURITY ALL ABOUT?
Slide 4 / 34

VULNERABILITY, THREAT, COUNTERMEASURE

Slide 4: VULNERABILITY, THREAT, COUNTERMEASURE

Notes

  1. Trap “Data breach” is a threat or an impact, never a vulnerability. A vulnerability is the WEAKNESS (weak passwords, misconfigured buckets).

Exam angle

Past exam · Major A

scenario · two assets, threats and vulnerabilities

Past exam · Major AQ1

A misconfigured, publicly accessible storage bucket is a(n):

Past exam · Major AQ2

A ransomware attacker who could exploit weak passwords is a(n):

Slide 5 / 34

Risk is exist when you have a threats with a vulnerabilty in the system or in one of the security control.

Slide 5: Risk is exist when you have a threats with a vulnerabilty in the system or in one of the security control.

Notes

  1. Memory trick Risk = threat × vulnerability (× impact).

Slide 6 / 34

THREAT DAMAGE

Slide 6: THREAT DAMAGE
Slide 7 / 34

Slide 7

Slide 7: Slide 7

Notes

  1. Threats overview.

Slide 8 / 34

THREATS

Slide 8: THREATS

Notes

  1. Common threats (Get Cyber Safe list).

Slide 9 / 34

Modern Threat Landscape

Slide 9: Modern Threat Landscape
Slide 10 / 34

Threat Vectors/Techniques

Slide 10: Threat Vectors/Techniques
Slide 11 / 34

TYPES OF MALWARE

Slide 11: TYPES OF MALWARE

Notes

  1. Malware types: virus, worm, Trojan, spyware, adware, rootkit, ransomware.

Slide 12 / 34

Malware Symptoms

Slide 12: Malware Symptoms

Notes

  1. Symptoms: high CPU, slow browser, network problems, freezing, unknown programs, pop-ups.

Slide 13 / 34

Malware Countermeasures

Slide 13: Malware Countermeasures

Notes

  1. Countermeasures: good antivirus with updated definitions, don’t open untrusted attachments, patch, back up.

Slide 14 / 34

TYPES OF CYBERSECURITY THREATS

Slide 14: TYPES OF CYBERSECURITY THREATS

Exam angle

PredictionQ1

Social-engineering-based malware that demands payment to unlock or decrypt data is:

Slide 15 / 34

TYPES OF CYBERSECURITY THREATS

Slide 15: TYPES OF CYBERSECURITY THREATS

Exam angle

Past exam · Final 221 · A

MCQ · emails targeting you specifically = spear phishing

PredictionQ1

Frequent emails impersonating your bank, crafted to convince YOU specifically to give your credentials, are:

Slide 16 / 34

Slide 16

Slide 16: Slide 16

Notes

  1. More social engineering: vishing, smishing, baiting, pretexting, tailgating.

Exam angle

Past exam · Major B

A · following someone through a door = tailgating

Past exam · Major BQ1

Following an authorised person through a secured door without authenticating is:

Slide 17 / 34

TYPES OF

Slide 17: TYPES OF
Slide 18 / 34

SE Counter Measures

Slide 18: SE Counter Measures

Notes

  1. Social engineering countermeasures: password policies (change, complexity), physical security, training.

Slide 19 / 34

SE Counter Measures

Slide 19: SE Counter Measures
Slide 20 / 34

AI-Driven Cyber Threat Vectors

Slide 20: AI-Driven Cyber Threat Vectors
Slide 21 / 34

WHERE THREATS MAY EXIST

Slide 21: WHERE THREATS MAY EXIST

Notes

  1. Threats exist at every level: personal, enterprise, Internet of Things, critical infrastructure.

Slide 22 / 34

CIA TRIAD CONFIDENTIALITY, INTEGRITY, AND AVAILABILITY TRIAD

Slide 22: CIA TRIAD CONFIDENTIALITY, INTEGRITY, AND AVAILABILITY TRIAD

Notes

  1. C.I.A.: confidentiality (secrets stay secret), integrity (accurate, unmodified), availability (accessible when needed).

  2. Seen again Ch 1, slide 14: C.I.A. definitions

Slide 23 / 34

CONFIDENTIALITY

Slide 23: CONFIDENTIALITY
Slide 24 / 34

ATTACKS FOCUSES ON THE VIOLATION OF CONFIDENTIALITY

Slide 24: ATTACKS FOCUSES ON THE VIOLATION OF CONFIDENTIALITY
Slide 25 / 34

ATTACKS FOCUSES ON THE VIOLATION OF CONFIDENTIALITY

Slide 25: ATTACKS FOCUSES ON THE VIOLATION OF CONFIDENTIALITY
Slide 26 / 34

METHODS USED TO ENSURE CONFIDENTIALITY

Slide 26: METHODS USED TO ENSURE CONFIDENTIALITY
Slide 27 / 34

METHODS USED TO ENSURE CONFIDENTIALITY

Slide 27: METHODS USED TO ENSURE CONFIDENTIALITY

Notes

  1. Soft tokens, key fobs (2FA/MFA), and storing sensitive documents offline.

Exam angle

Past exam · Major B

A · what stops access even with a stolen password = MFA

Past exam · Major BQ1

Which control still blocks access when a user’s password is stolen?

Slide 28 / 34

INTEGRITY

Slide 28: INTEGRITY
Slide 29 / 34

INTEGRITY

Slide 29: INTEGRITY

Notes

  1. Ensure integrity: cryptographic checksums (hashes), digital signatures, backups.

  2. Seen again Ch 6.2, slide 3: Hashing

Slide 30 / 34

AVAILABILITY

Slide 30: AVAILABILITY

Notes

  1. Availability threats: device failure, software errors, environment (heat, floods, power), DoS. Prevent data loss: backups, redundancy, disaster recovery.

Exam angle

Past exam · Final 221 · A

Related question: MCQ · attack making assets unavailable

PredictionQ1

An attack that makes company assets unusable or unavailable is a(n):

PredictionQ2

A system is offline 2 h 20 min a week for 13 weeks for testing. What is its availability over those 13 weeks (1 d.p.)? (Quiz 1 222 style)

Compare with the model answer

Downtime = 140 min × 13 = 1820 min. Total time = 13 weeks × 7 × 24 × 60 = 131,040 min. Availability = (131,040 − 1,820) / 131,040 = 98.6%.

Slide 31 / 34

AAA SERVICES

Slide 31: AAA SERVICES

Notes

  1. Tip AAA = five elements: Identification (claim) → Authentication (prove) → Authorization (permissions) → Auditing (record) → Accounting (hold responsible). Phase 1 (getting in): identification, authentication, authorization. Phase 2 (afterwards): auditing, accountability.

Slide 32 / 34

ACCESS CONTROL (AAA ELEMENTS)

Slide 32: ACCESS CONTROL (AAA ELEMENTS)

Exam angle

PredictionQ1

Identification, authentication, authorization and accountability are divided into two phases. What are they? (Final 221 B)

Compare with the model answer

Phase 1, gaining access: identification, authentication and authorization. Phase 2, after access: auditing and accountability (accounting), which record and tie actions to the user.

PredictionQ2

Proving that you are the identity you claimed is:

Slide 33 / 34

PROTECTION MECHANISMS

Slide 33: PROTECTION MECHANISMS

Notes

  1. Protection mechanisms: layering (defence in depth), abstraction, data hiding, encryption.

Slide 34 / 34

PROTECTION MECHANISMS

Slide 34: PROTECTION MECHANISMS

Notes

  1. Data hiding: keep data out of reach of unauthorised subjects. Encryption: hide the meaning of a communication.