So before we move ahead, it is important for you to understand the different terms involved in cyber
security.
So the first is information security.
We have already discussed this term.
But let's have a quick recap.
Information security covers the broader aspect of all the assets, whether it is hardware or software
or human resources or assets.
It covers everything that needs to be protected.
The next is risk management, risk management is a procedure which is used to identify risks and threats
in the organization, which can disrupt the normal processing of the organization, and then various
risk treatment procedures are applied to mitigate the risk that comes under the process of risk management.
Confidentiality, confidentiality is a measure which is used to prevent the data from having access
to unauthorized persons, so confidential means something that only restricted people can access or
see.
Integrity is something that the data should not be altered when it is being sent from one sender to
the receiver.
So integrity checks, if the data that is being sent and the data that is being received is same or
not.
Availability make sure that the data or information or assets or anything on which comes on the information
and asset is available to the required people then and wherever it is necessary.
Threat threat is something which can harm the reputation of organization or can disrupt the normal processing
of the organizational services.
Vulnerability, vulnerability is a weakness in the organization or a weakness or a flaw in the system
through which the attackers can gain the access to the internal systems and then they can cause the
different attacks.
For example, let's say you have a house, you have a bungalow, you have two kids.
The first is the front gate and another is a back gate.
Front gate has a security guard installed, but the back gate does not have a security guard, a security
guard, neither a security camera.
So the back gate is a vulnerability for the house because the thief can come into your house, not through
the front gate, but it can definitely come through the back gate.
Attack is an incident which happens in the organization in order to cause harm to the reputation or
which causes a negative impact on the organization.
Firewalls, firewalls are programs specifically designed which are installed on software as well as
hardwares to assess the incoming packets through the Internet and allow or restrict the packets entering
into the network.
Cryptography is the process through which the CIA triad of information security is maintained, so cryptography
is used to see whether the system is following confidentiality, whether the data is not altered, whether
it follows integrity and the data is available when and where it is needed.
Encryption and decryption is the process through which confidentiality, integrity and availability
is achieved are going to see encryption and decryption in upcoming sections as well.
Hashing is the process of converting input thing.
Think it can be a text?
It can be a document.
It can be an image into a specified output of a fixed length.
So it is a string of random alphabets used to check the integrity of the original input.
Virtual private network is a kind of network where people use it to access to the informational assets
when they are working remotely, or anyone who wants to access the organization's resources but are
not in the organizations, use this virtual private network, which is a secured network which uses
secured protocols as if the people are in the organization itself.
Ransomware is a kind of malware when attacked, the hackers ask for a specific ransom, a specific amount
of money in order to delete the virus or in order to give the system back to its owner.
Hacker, as we are going to see in detail in the next section, HACA is any person who had exceptional
computer skills and knowledge of networking and then operating systems and programming language, who
can then use those skills to breaking into the system.
So not necessarily hacker is a bad guy.
There are three different types of hackers.
White hat hacker, which is a good guy who works for the organization, a black hat hacker, which is
a very bad guy and a great hacker who works according to his own thinking.
Fishing, fishing is an act, fishing is an attack, a social engineering attack done on people who
have no knowledge of security.
It is the process in which Tiger gains the credentials from the users by, you know, talking.
It's just it's kind of a sweet talking.
You know, attackers or hackers talk in such a way that people automatically reveal that information
to the attackers.
Cloud computing or it's not cloud, actually, it's cloud security, cloud computing, OK, cloud has
now it is become very popular.
It's a kind of a storage data where many people have started migrating to cloud technologies because
it provides a much more broader aspect of processing the information.
And again, immediate advantage of security and peace of storage, access control, access control is
a mechanism through which access is restricted to users.
It is a process through which organizations assign different rules, different accesses to their employees.
Identity management, as we discussed in the career part, identity management deals with the identities
of user identities of their employees and how the identities can be protected from the malicious attacks.
And you know, who has the proper access according to the identity.
Again, certifications are very important when it comes to cybersecurity.
People have more certifications than they have their basic degrees.
So certifications do play an important role.
There are many certifications like certified ethical hacker, then certified information systems Orito
CISSP Security Plus.
And you know, it's like leveraging you.
You have a leverage when it comes to certifications.
You have knowledge as compared to other individuals.
Authentication is a process by which we check whether the person who is trying to access the system
is really the person who he or she is claiming to be.
So let's say if you are X, Y, Z, and if you are accessing a particular resource, so you have to
prove that you are X, Y, Z.
So there are different authentication factors like login IDs, passwords, or, you know, there are
like fingerprints, biometric modules.
So these this is the process of authentication is the process of basically proving your identity antivirus
software, which is used to counter the various malware that enter into your system.
So antivirus is a software, it is only installed, it is only a software.
It cannot be installed on routers.
It just meant for laptops and backstops.
So antivirus is used to tackle the hardware.
Spyware is malware, Trojans and everything.
Great job now that you have understood the basic terminologies in the next lecture.
We will talk about the vulnerability assessment procedure that many penetration testers follow.
So if you are really interested in getting known to the ethical hacking part, you should not skip this
lecture.
I will see you in the next lecture.