Basic Cyber Security Concepts
The CIA Triad
In the world of information security, the CIA triad serves as the fundamental model for developing security policies.
Confidentiality
This ensures that information is not disclosed to unauthorized individuals, processes, or systems. Techniques to ensure confidentiality include data encryption, username/password authentication, and two-factor authentication.
Integrity
Integrity involves maintaining the consistency, accuracy, and trustworthiness of data over its entire lifecycle. Data must not be changed in transit, and steps must be taken to ensure data cannot be altered by unauthorized people (for example, in a breach). Hashing is a common method to verify integrity.
Availability
This ensures that the information is available when it is needed. This means computing systems used to store and process the information, the security controls used to protect it, and the communication channels used to access it must be functioning correctly. DDoS attacks specifically target Availability.
