Cybersecurity Fundamentals

Confidentiality Integrity and Availability; the three fundamental goals of information security.

Ensuring information is accessible only to authorized people.

Ensuring information remains accurate complete and unaltered without authorization.

Ensuring systems and information are accessible when needed.

Verifying the identity of a user or device.

Determining what an authenticated user is allowed to access or do.

Using two or more different authentication factors to verify identity.

A security process that determines who can access resources and what actions they can perform.

Recording and reviewing activities to track user actions and detect suspicious behavior.

Recording system application and security events for monitoring and troubleshooting.

Malicious software designed to damage disrupt or gain unauthorized access to systems.

Malware that attaches to files or programs and spreads when they are executed.

Malware that self-replicates and spreads across systems often through networks.

Malware disguised as legitimate software.

Malware that encrypts or locks data and demands payment.

Software that secretly collects information about users.

Malware designed to hide malicious activity and maintain privileged access.

A social engineering attack that tricks people into revealing information or clicking malicious links.

A targeted phishing attack aimed at a specific individual or organization.

Manipulating people into revealing confidential information or performing unsafe actions.

Creating a fabricated scenario to trick someone into revealing information.

Following an authorized person into a restricted area without permission.

Denial of Service; an attack that overwhelms a service or system to make it unavailable.

Distributed Denial of Service; an attack that uses multiple devices or sources to overwhelm a target.

An attack that inserts malicious SQL statements into vulnerable application inputs to manipulate database queries.

Falsifying an identity or address to impersonate another device user or organization.

Gathering information about a target system or organization.

A software vulnerability unknown to the vendor or without an available security fix.

A security system that monitors and controls incoming and outgoing network traffic based on rules.

Giving users only the access and permissions necessary to perform their jobs.