What Is Security

Two main objectives of Security:

• Making sure authorised personnel have access to the resources they need

• Making sure unauthorised personnel do not have access to the resources

• Authentication is the procedure of confirming the identity of the user trying to access certain data

• It is a mandatory element of security model

Assets: Anything of value to your Organisation

• Hardware

• Software

• Staff

• Data

• Network

Lives:

• This is because Cyber Security involves protecting beyond your Organisation. E.g. Citizens of a Country, customers, children etc.

• A threat needs a vulnerability
  
  
• A vulnerability is a loophole that a threat can take advantage of
  
  
• A threat would usually need a vulnerability to be successful
  
  
• It is risky to your business if you have vulnerabilities that threats can exploit

• Subject: makes request to access/use an object

• Objects: the resource a subject needs access to

curl -S https://path/to/url --data $(cat)

{
  "id": 1001,
  "title": "Who invented JSON?",
  "author": {
  "name": "Douglas Crockford"
  },
  "tags": ["api", "json", "programming"],
  "published": false,
  "publishedTimestamp": null
}

• Helps ensure information is unchanged between source and destination

• Hashing can be used to easily compare files and spot those that have been altered (by comparing their hashes)

Your Hash: 2f2bae6733b6449f88b7c372108c1eb7
Your String: "This MD5 generator is useful for encoding passwords,"

Your Hash: 441ab12d5386b0eb6755df60bccb5b08
Your String: "This MD5 generator is useful for encoding passwords"

CIA Triad (Information Security)
Confidentiality (C): Ensures that sensitive information is only accessible to authorized individuals, preventing unauthorized access or disclosure.

Integrity (I): Maintains the accuracy and trustworthiness of data by preventing unauthorized modifications.

Availability (A): Guarantees that information and systems are accessible to users when needed, ensuring reliable access.

FSP Triangle (Design Trade-offs)
Functionality (F): Refers to the features and capabilities a system provides to meet user and business requirements.

Security (S): Involves protecting systems and data from threats, often requiring compromises with functionality or performance.

Performance (P): Measures how efficiently a system runs, including speed and responsiveness, which can sometimes conflict with security measures.