Introduction to Cybersecurity: Threats and Vulnerabilities

Learning Objectives Define cybersecurity and explain its importance in daily life. Differentiate between a threat, a vulnerability, and a risk. Identify at least three common types of cyber threats, such as malware and phishing. Describe at least two common system vulnerabilities, like weak passwords and unpatched software. Explain the three components of the CIA Triad: Confidentiality, Integrity, and Availability. Analyze a simple scenario to identify potential threats and vulnerabilities. Ever received a weird email asking for your password or telling you you've won a prize? 🤔 Let's find out what that's all about and how to stay safe online! In this lesson, we'll dive into the world of cybersecurity, exploring the digital dangers called threats and th...

TermDefinitionExample CybersecurityThe practice of protecting computer systems, networks, and data from digital attacks, damage, or unauthorized access.Using antivirus software on your computer and a strong, unique password for your email are both parts of practicing good cybersecurity. ThreatAny potential danger that can harm a computer system, network, or data. It's the 'what' could cause damage.A computer virus designed to steal your files is a threat. A hacker trying to guess your password is also a threat. VulnerabilityA weakness or flaw in a system, process, or control that a threat can exploit to cause harm. It's the 'how' a threat can get in.Using 'password123' as your password is a vulnerability because it's easy to guess. Not updating...

The Risk Formula Risk = Threat x Vulnerability This is a conceptual model, not a strict mathematical formula. It shows that for a risk to exist, you need both a threat (an attacker) and a vulnerability (a weakness) for that threat to exploit. Eliminating either the threat or the vulnerability can eliminate the risk. Principle of Least Privilege (PoLP) Grant only the minimum level of access or permissions necessary for a user or system to perform its required function. Use this principle to limit potential damage. If a user account only needs to read files, don't give it permission to delete them. If an app only needs access to your camera, don't grant it access to your contacts. Defense in Depth Implement multiple layers of security controls. This is the id...