All language subtitles for 1. Key Security Concepts

In our next section we will talk about the key security concepts

let's start with the cyber threats.

Cyber threats or simply threats refer to cyber security circumstances or events with the potential to

cause harm by way of their outcome.

A few examples of common threats include as social engineering are phishing attack that leads to an

attacker installing a Trojan and stealing private information from your applications.

Political activists need those seeing your Web site an administrator accidently leaving data unprotected

on a production system causing a data breach or soon flooding your ISP data center.

Cyber security threats are actualized by threat to actors Skye's threat actors usually refer to persons

or entities who may potentially initiate at threat while natural disasters as well as other environmental

and political events do constitute threats.

They are not generally regarded as being threat actors.

Examples of common threat actors include financially motivated criminals which are known also as cyber

criminals guys and politically motivated activists and these guys are known as the hacktivists and competitors

careless employees and nation state attackers.

Cyber threats can also become more dangerous if threat to actors leverage one or more vulnerabilities

to gain to a system often including the operating system yeah let's go ahead with the one notable TS

vulnerabilities simply refer to our weaknesses in our system they make threat the outcomes possible

and potentially even more dangerous.

A system could be exploited through a single vulnerability.

For example let's say as a single ask fuel injection attack could go to an attacker full control over

sensitive data an attacker could also chain several exploits together and taking advantage of more than

one vulnerability to gain more com control.

Examples of common vulnerabilities are as cruel injections cross site scripting server mis configurations

sensitive data transmitted in plain text and more

exploitation.

Exploitation is the next step in attackers playbook after finding a vulnerability on the system exploits

are the meals through which vulnerability can be leveraged for malicious activity by hackers.

And these include pieces of software sector analysis of comments or even open source exploit kids so

yeah.

We have threads and we have vulnerabilities we have exploits saw how we can mitigate it.

All of these things and we have some mitigation techniques and their training and awareness patch management

policies and procedures and incident response.

Let's start with the training and awareness.

It is constituted as the most convenient and comfortable form of the security guys.

User training is considered as the least expensive and the most effective mitigation technique.

Actually it is the best way to keep the users from making mistakes that will lead to success of the

social engineering attack is educating how to handle them.

It is important to know the procedures protocols and the policies for the security of a network or else

training users.

Skew a real advantage of the relatively low cost guys.

And the second thing is the pitch management.

When an application or an operating system is released it is not perfect far from the security perspective

guys.

Then after Dooley's updates and security patches are released on the ongoing basis which can add to

as software to make them more secure or provide it's more functionality.

And the third thing is policies and procedures the security procedures and policies must be outlined

clearly in writing in the organization guys and it should define acceptable behaviors on networks and

organization computers.

Who uses the computers has to read the procedures and policies and also sign the form for agreeing it.

And the last thing is the incident response when the intruder has enacted an attack on the network.

Then the first instinct gets you the user back to work regardless of what that takes.

It makes more sense in the short run but in case of long run it might be a wrong move surely guys.

The rails tall software which is damaged by the attack then this rare installation may covered the threat

of an attacker and prevent it from persecuting and finding it.

Also it is essential to understand these security threats which affect the networks and be familiar

with the affecting networks like those attacks warms viruses social engineering and men in the middle

attacks.

It is necessary to learn each type of these attacks operates and how to secure it.

Additionally understand the mitigation techniques such as incident response procedure and policies patch

management and training and awareness understand efficient and effective methods of protecting against

these social engineering threats and also other network weaknesses as software security physical security

is also so important infrastructure locations such as network closets and data centers should remain

securely locked badge.

Access to sensitive locations is a scalable solution offering an audit trail of identities and time

stamps when access is granted.

Administrators can control access on a granular basis and quickly remove access when an employee is

dismissive.