Download Information Security Fundamentals: Threats, Vulnerabilities, and the CIA Triad and more Schemes and Mind Maps Information Security and Markup Languages in PDF only on Docsity!
Notes on Introduction to Information Security
and Security Threats and Vulnerabilities
Study Notes
May 14, 2025
Contents
1 Introduction to Information Security..................... 2 1.1 Definition of Information Security..................... 2 1.2 Importance of Information Security.................... 2 1.3 CIA Triad: Confidentiality, Integrity, Availability............ 3
2 Security Threats and Vulnerabilities..................... 4 2.1 Types of Threats................................ 4 2.2 Vulnerabilities................................. 5 2.3 Risk Assessment................................ 6
3 Conclusion...................................... 6
1 Introduction to Information Security
Information security is about protecting data from being stolen, changed, or de- stroyed. It ensures that important information, like personal details, bank ac- counts, or company secrets, stays safe and is only accessed by the right people. This section explains what information security is, why it matters, and its main goals, known as the CIA triad.
1.1 Definition of Information Security
Information security (often called InfoSec) is the practice of keeping data safe from unauthorized access, use, or damage. It involves using tools, policies, and techniques to protect information stored on computers, networks, or even phys- ical documents.
- What It Protects : Data like emails, passwords, financial records, or health information.
- How It Works : Uses methods like encryption, passwords, and firewalls to block hackers.
- Example : A bank uses information security to protect customer account details from hackers.
1.2 Importance of Information Security
Information security is critical in today’s digital world because data is valuable, and threats are common.
- Protects Privacy : Keeps personal information, like your address or credit card number, private.
- Prevents Financial Loss : Stops hackers from stealing money or causing business disruptions.
- Builds Trust : Companies that protect customer data earn trust and avoid reputation damage.
- Ensures Safety : In industries like healthcare, secure data can prevent harm (e.g., protecting medical records).
- Example : If a hospital’s patient records are hacked, it could lead to privacy violations or even incorrect treatments. Information security prevents this.
- Why It Matters Today : With more people using online banking, shopping, and social media, the risk of data theft is higher than ever.
2 Security Threats and Vulnerabilities
Security threats and vulnerabilities are risks that can harm data or systems. Threats are attacks, like viruses, while vulnerabilities are weaknesses that make attacks possible. This section explains common threats (viruses, worms, Trojans, spyware, ransomware), vulnerabilities, and how to assess risks.
2.1 Types of Threats
Threats are actions or programs that try to harm systems or steal data. Here are some common ones:
- Viruses : - What It Is : Malicious code that attaches to files or programs and spreads when they’re opened. - Impact : Can corrupt files, slow systems, or steal data. - Example : A virus in an email attachment deletes important documents. - Prevention : Use antivirus software like Windows Defender and avoid opening unknown files.
- Worms : - What It Is : Self-spreading malware that infects systems without user action. - Impact : Can overload networks or steal information. - Example : A worm spreads through a company network, infecting all computers. - Prevention : Keep software updated and use firewalls to block suspi- cious traffic.
- Trojans : - What It Is : Malware disguised as legitimate software to trick users into installing it. - Impact : Can create backdoors for hackers or steal data. - Example : A fake app downloads a Trojan that logs your keystrokes. - Prevention : Download software only from trusted sources.
- Spyware : - What It Is : Software that secretly tracks user activity, like browsing or
typing.
- Impact : Steals sensitive information, like passwords or credit card de- tails. - Example : Spyware records your online banking login details. - Prevention : Use anti-spyware tools and avoid clicking suspicious ads.
- Ransomware : - What It Is : Malware that encrypts files and demands payment to un- lock them. - Impact : Can lock critical data, causing financial or operational dam- age. - Example : A hospital’s patient records are locked by ransomware, dis- rupting care. - Prevention : Regular backups and avoiding suspicious links or down- loads.
2.2 Vulnerabilities
Vulnerabilities are weaknesses in systems, software, or processes that threats can exploit.
- Types of Vulnerabilities : - Software Bugs : Errors in code, like unpatched apps, that hackers can exploit. - Weak Passwords : Simple passwords (e.g., “password123”) that are easy to guess. - Misconfigurations : Incorrect settings, like leaving a server’s admin panel open to the internet. - Human Errors : Clicking phishing links or sharing sensitive informa- tion.
- Example : An outdated web browser has a known bug that lets hackers install malware.
- How to Fix : - Update software regularly to patch bugs. - Use strong passwords and multi-factor authentication.
