Cyber security, often called information security or IT security, is the practice of protecting systems, networks, and data from digital attacks, theft, damage, or unauthorized access. It encompasses a broad range of practices, technologies, and concepts designed to safeguard information and ensure the integrity, confidentiality, and availability of data.

The CIA Triad is a fundamental model in information security that represents the three core principles of security management: Confidentiality, Integrity, and Availability. These principles guide the development and implementation of security policies and measures to protect data and systems. Here's a detailed look at each component:

Confidentiality

• Data Privacy: Ensuring that information is only accessible to those who are authorized to view it.
• Encryption: Converting data into a code to prevent unauthorized access.

Integrity

• Data Accuracy: Ensuring that data is accurate and has not been tampered with or altered by unauthorized individuals.
• Checksums and Hashing: Techniques to verify that data remains unchanged.

Availability

• System Uptime: Ensuring that systems and data are available to authorized users when needed.
• Redundancy and Backup: Implementing measures to recover from system failures or data loss.

• • Phishing: Attempts to deceive individuals into providing sensitive information (e.g., passwords, credit card numbers) by pretending to be a trustworthy entity.
  • Malware Attack: Malicious software designed to damage, disrupt, or gain unauthorized access to systems. Types: Viruses, Worms, Trojans, Ransomware, Sypware
  • Denial of Service (DoS) Attack: Overwhelm a system, server, or network with traffic to render it unavailable to users. Flood Attacks: Sending excessive amounts of traffic to overwhelm resources. Distributed Denial of Service (DDoS): Coordinated attacks from multiple sources to amplify the impact.
  • Man in the Middle Attack: Intercept and potentially alter communication between two parties without their knowledge.
  • SQL Injection :  Exploits vulnerabilities in a web application's database query handling by injecting malicious SQL code. Impact: Unauthorized access to database content, data manipulation, or destruction.

• Cross Site Scripting: Injects malicious scripts into web pages viewed by other users.

• Insider Threats: Threats originating from within an organization, including employees or contractors. Malicious Insiders: Individuals with intent to harm or steal information. Negligent Insiders: Individuals who accidentally compromise security through careless actions.
• Brute Force Attacks : Systematic attempts to guess passwords or encryption keys through trial and error.
• Domain Kiting:  Abuses domain registration practices to register and drop domains frequently to avoid paying registration fees. Impact: Potential for malicious activities using unregistered domains.

Cryptography is the practice and study of techniques for securing communication and information through the use of codes and ciphers. Its primary goals are to ensure the confidentiality, integrity, and authenticity of data. Cryptography transforms readable data into an unreadable format to protect it from unauthorized access and then converts it back to its original form when needed.

Penetration testing, often referred to as pen testing, is a proactive security practice where authorized experts simulate cyberattacks on a system, network, or application to identify vulnerabilities and weaknesses before malicious hackers can exploit them. The goal is to uncover security flaws and assess how well the system can withstand an actual attack.

Types of Pen Testing: Black Box Testing, White Box Testing, Gray Box Testing.

SSL(Secure Sockets Layer) is the industry-standard security technology creating encrypted connections between Web Server and a Browser. SSL protocol ensures secure data transmission between web browsers and servers using encryption, authentication, and data integrity checks.

A Chief Information Security Officer (CISO) is a senior executive responsible for overseeing an organization's information security strategy, ensuring the protection of data and systems from cyber threats. The CISO plays a critical role in managing and mitigating security risks, implementing security policies, and leading the organization’s efforts to maintain a robust security posture.