15.0 Cybersecurity Awareness
Tags: #◇Computer Science #◇CCICOMP #◇Cybersecurity #◇Ethics #◇M6
◇Overview
This document provides an introduction to cybersecurity awareness, focusing on understanding common cyber threats, reviewing major real-life cyber incidents, and establishing best practices for digital hygiene. It also highlights the critical importance of ethical behavior in computing and the role of ethical hacking in identifying vulnerabilities.
◇Key Definitions
Cybersecurity: The practice of defending computers, servers, mobile devices, electronic systems, networks, and data from malicious digital attacks. Malware (e.g., Ransomware): Malicious software designed to disrupt, damage, or gain unauthorized access to a computer system. Ransomware encrypts user data and demands payment for the decryption key. Botnet: A network of private computers infected with malicious software and controlled as a group without the owners' knowledge (e.g., used for DDoS attacks). Phishing: A cybercrime where targets are contacted by email, telephone, or text message by someone posing as a legitimate institution to lure individuals into providing sensitive data. Ethical Hacking: The practice of intentionally probing computer systems to find security vulnerabilities that a malicious hacker could potentially exploit, generally done with permission (e.g., Bug Bounty Programs).
◇Theoretical Framework
Notable Real-Life Cyber Attacks
Understanding historical attacks helps in recognizing threat vectors: WannaCry (2017): A massive global ransomware attack that targeted computers running the Microsoft Windows operating system by encrypting data and demanding ransom payments in the Bitcoin cryptocurrency. Mirai Botnet (2016): A malware that turns networked devices running Linux into remotely controlled bots that can be used as part of a botnet in large-scale network attacks. Yahoo Data Breach (2013-2014): One of the largest data breaches in history, compromising billions of user accounts. SolarWinds Supply Chain Attack (2020): Hackers inserted malicious code into the SolarWinds Orion IT monitoring system, compromising thousands of organizations, including US government agencies. GCash Phishing Scam (2024): Targeted social engineering attacks aiming to steal user credentials and funds from the popular mobile wallet.
Best Practices and Cyber Hygiene
To mitigate the risk of cyber threats, users and organizations should adopt the following hygiene tips: Regularly update operating systems and software to patch vulnerabilities. Utilize strong, unique passwords and enable Multi-Factor Authentication (MFA). Be cautious of unsolicited communications containing links or attachments (anti-phishing). Implement regular, secure data backups.
Ethical Responsibilities in Computing
Professionals in computing hold ethical responsibilities to safeguard user data and maintain system integrity. Case Study: Ethical hackers participating in Bug Bounty Programs. By responsibly disclosing vulnerabilities to organizations rather than exploiting them or selling them on the black market, ethical hackers play a vital role in strengthening overall cybersecurity posture.
◇References & Navigation
- Previous Topic: ◇Internetworking
- Next Topic: ◇Software Development Process
- Related Notes: ◇Introduction to Cybersecurity, ◇Security
ACTIVE RECALL VERIFICATION
Select an answer to verify conceptual comprehension and reveal the technical rationale.
Which type of malware encrypts user data and demands payment for the decryption key?
What is a botnet?
Which cybercrime involves luring individuals into providing sensitive data by posing as a legitimate institution?
What was the WannaCry incident of 2017?
What is the purpose of ethical hacking?
How did the SolarWinds Supply Chain Attack of 2020 compromise thousands of organizations?
Which best practice helps mitigate the risk of cyber threats regarding passwords?
What role do ethical hackers play in Bug Bounty Programs?
What was the Mirai Botnet known for doing in 2016?
Which fundamental cybersecurity hygiene practice involves software?