Foundations of Cybersecurity

Cybersecurity involves protecting sensitive information, systems, programs, and networks from harmful digital attacks. When it comes to protecting a computer system, hardware devices are just as important as the software installed on it. Hardware devices can be used to protect computer systems from these malicious attacks. It is important to understand the different hardware devices used for cybersecurity. 

This week will cover

• The basics of cybersecurity 
• Importance of cybersecurity
• Careers in cybersecurity 
• Basic hardware and boot devices
• Challenges on Enterprise Cyber Attack
• Prerequisites for Cyber Security career
• Power-On Self Test (POST)
• Basic Input/Output System (BIOS)
• Unified Extensible Firmware Interface (UEFI)
• Network Interface Card (NIC)
• Firmware
• Virtualization
• Redundant Array of Independent/Inexpensive Disks
• (RAID)
• Network Attached Storage (NAS)
• Hard Disk Drives (HDD), Solid-State Drive (SSD),
• Non-Volatile Memory express (NVMe)

Networking is the process of linking computer systems together to enable the transfer of data between them. Data is shared back and forth between systems through devices that communicate with each other, as well as with other networks. As data is shared back and forth between systems, security devices monitor the traffic and filter out potential harmful traffic. It is important to understand how networking works, as well as the different devices in a network. 

This week will cover

• Router and its usage 
• Firewall 
• Private and Public Internet Protocol (IP)
• Protocol 
• Open Systems Interconnection (OSI) Layer 
• Introduction to Networking 
• Router, Switch, Firewall, Wi-Fi 
• Access Point vs Range Extender 
• IPV4 / IPV6
• Private and Public IP
• MAC Address
• Protocol
• OSI Layer
• Attack patterns based on OSI Layer

Networks have different features, processes, and configurations when working across servers. There are also technologies used to monitor a system or network for harmful threats. When a threat is detected, they take a set of defined measures to prevent it from affecting the system. It is therefore important to understand the dynamics of a network. 

This week will cover

• Intrusion Detection System (IDS), Intrusion Prevention System (IPS) 
• Unicast, Broadcast, Multicast 
• Automatic Private IP Adressing (APIPA) 
• Transmission Control Protocol (TCP) 3 Way Handshake 
• Address Resolution Protocol (ARP)/Reverse Address Resolution Protocol (RARP) 
• Port Number and Well Known Ports 
• Network Address Translation (NAT)/Value-Added Network (VAN)

Windows is primarily an OS that facilitates connecting to the internet, and lets users interact with the system. It has servers that process, manage, and share data to other systems via networks. There are protection protocols integrated into the operating system to keep it safe from threats when sharing data across servers. It is therefore important to understand the basics of Windows and servers. 

This week will cover

• Server types 
• Workgroup Vs. Domain 
• User Account Control Usage
• What a server is and its function
• Windows server roles and usage
• Products used in windows server
• Workgroup Vs Domain
• User Account Control usage
• Bitlocker functionality
• Event Viewer usage
• PowerShell in windows
• Basic windows commands

Linux is an operating system that is free of cost. It has a security distribution called Kali Linux that is made specifically for cybersecurity. By using Kali Linux, cyber attacks can be simulated on the system to identify any possible vulnerabilities. It is important to know the basics and features of Linux and Kali Linux.   

This week will cover

• Linux and its features
• Linux Distros
• Directory structure
• File systems
• Linux basic commands
• Linux and its structure
• The list of features in Linux
• Linux distributions and its types
• Linux directory and file structure
• Linux basic commands
• Networking based commands in linux
• Kali linux and its features

Cyber attacks aim to harm the working of a network or system. These attacks are carried out by hackers using different methods that pose cybersecurity threats. It is important to understand the different sources of cybersecurity threats to prevent them from attacking a system or network. 

This week will cover

• Types of hackers 
• Sources of cybersecurity threats 
• Types of malware and its classifications 
• Difference between virus/spam and its working scenario 
• Raise of spyware, adware, and keylogger 
• Ransomware working and types 
• Phishing, Denial of Service (DoS), and Distributed Denial of Service (DDoS) attacks

Hackers use attack vectors to intrude systems and networks. Attack vectors are different methods that they use to steal and exploit data from organizations. It is important to know the different possible attack vectors used by hackers to protect systems in organizations. 

This week will cover

• Attack vectors based on web application 
• URL structure and how URL manipulation works 
• Cross-Site Scripting (XSS) and SQL (Structured Query Language) Injection 
• What encryption is and how its related to Secure Sockers Layer (SSL)/Transport Layer Security (TLS) 
• Comparing the usage of cryptography in daily use of applications 
• HTTP request methods and detection of status code
• Honey pot in cybersecurity 
• Importance of Open Web Application Security Project (OWASP)
• Top 10 most critical risks

As there are many cybersecurity risks and threats, cybersecurity frameworks provide a standard set of protocols and practices on how to manage them. These frameworks provide organizations with a structured process to strengthen their cybersecurity management. It is therefore important to understand cyber security frameworks and their importance. 

This week will cover

• Cyber risk analysis 
• Cyber security frameworks 
• Blockchain and cloud computing 
• Insight of darknet and how to defend yourself 
• CIA and it’s usage
• Difference between threat, vulnerability and risk
• Cybersecurity frameworks and it’s efficiency in enterprise
• How blockchain technology is used in cryptocurrency
• Cloud computing and its types
• How MFA works and its types
• Dark web and how it’s used
• Protecting yourself from cyber attacks

Security Operations Center (SOC) teams are essential in protecting organizations from malicious cyberattacks by investigating possible threats. They are also responsible for managing security threats that arise, and managing security infrastructure. It is important to understand their roles and responsibilities, as well as the way they operate to protect organizations and systems from threats. 

This week will cover

• Team roles and responsibility
• Working hierarchy
• Multiple layers of Securing the infrastructure
• Physical and cloud security
• Introduction to SOC team
• Network Security
• Application Security
• Cloud Security
• Endpoint Security
• Email Security
• Vulnerability management
• Penetration Testing
• Identity Access Management (IAM)
• Security Information and Event Management (SIEM)