No history yet

Introduction to Cybersecurity

What Is Cybersecurity?

Cybersecurity is the practice of protecting computers, networks, and data from digital attacks, damage, or unauthorized access. Think about all the personal information you have online: bank details, private messages, photos. Cybersecurity is the shield that keeps that information safe.

In a world where almost everything is connected, from our phones to our cars, the importance of this digital protection grows every day. It’s not just about preventing hackers from stealing your credit card number. It’s about ensuring that the systems we rely on for banking, healthcare, and communication work correctly and are available when we need them.

At its core, cybersecurity aims to protect the Confidentiality, Integrity, and Availability of information, a concept often referred to as the CIA Triad.

The Core Principles

To understand cybersecurity, we start with three fundamental concepts known as the CIA triad. This isn't the intelligence agency, but a model for guiding information security policies. Every security measure is designed to uphold at least one of these principles.

Let's break down each part of the triad.

Confidentiality

noun

Ensuring that information is not disclosed to unauthorized individuals, entities, or processes. It's about keeping secrets.

Think of confidentiality like a sealed letter. Only the intended recipient should be able to open it and read the contents. Encryption, which scrambles data so it's unreadable without a key, is a primary tool for maintaining confidentiality.

Integrity

noun

Maintaining the consistency, accuracy, and trustworthiness of data over its entire lifecycle. Data must not be changed in transit or altered by unauthorized people.

Integrity means the information is what it's supposed to be. Imagine a doctor changing a patient's medical record by mistake. The loss of data integrity could have serious consequences. Security measures ensure that if any changes are made, they are authorized and tracked.

Availability

noun

Ensuring that information is accessible and usable upon demand by an authorized party. Systems and networks must be up and running when needed.

Availability is simple: you can get to your information when you need it. If a website crashes because too many people are trying to access it, its availability is compromised. This is why companies have backup servers and defenses against attacks that aim to shut down services.

Common Threats

Cyber threats are actions intended to disrupt, damage, or gain unauthorized access to a computer system. They often target one or more principles of the CIA triad. Here are a few of the most common types.

ThreatDescriptionPrinciple Targeted
MalwareMalicious software (like viruses or ransomware) that can steal data or damage your system.Confidentiality, Integrity, Availability
PhishingScams, usually through email, that trick people into giving away sensitive information like passwords.Confidentiality
Denial-of-Service (DoS)An attack that floods a system with traffic to overwhelm it and make it unavailable to users.Availability

A real-world example helps illustrate the impact. In 2017, the credit reporting agency Equifax suffered a massive data breach. Attackers exploited a vulnerability in their website software to access the personal data of 147 million people. This included names, Social Security numbers, and birth dates.

This was a catastrophic failure of confidentiality. The attackers stole sensitive information. The breach also affected availability, as Equifax had to take some systems offline to deal with the attack, causing disruptions for customers.

Lesson image

Ready to check your understanding of these core concepts?

Quiz Questions 1/5

What is the primary purpose of cybersecurity?

Quiz Questions 2/5

The CIA triad is a foundational model in information security. What do the letters C, I, and A stand for?

Understanding the CIA triad and the common threats that target it is the first step in building a strong foundation in cybersecurity. These principles guide every decision and strategy in protecting our digital world.