Cybersecurity Revision Notes

Anti-Malware Strategies

Anti-malware software, including antivirus, anti-spyware, and anti-ransomware, is designed to detect, prevent, and remove malicious software. Regularly updating these tools and conducting frequent scans are essential practices for effective protection against evolving threats like viruses, worms, and Trojans. It often uses signature-based detection and heuristic analysis to identify threats.

Encryption for Data Security

Encryption transforms readable data (plaintext) into an unreadable format (ciphertext) using an algorithm and a key. This process ensures data confidentiality, making it inaccessible to unauthorised individuals even if they gain access to the encrypted data. It's commonly used for data at rest (e.g., on hard drives) and data in transit (e.g., over networks via HTTPS or VPNs). Decryption requires the correct key.

Acceptable Use Policies (AUPs)

An AUP is a document outlining the permissible uses of an organisation's computer systems, networks, and data. It establishes clear expectations for users, helping to prevent misuse, maintain system integrity, and reduce security risks. AUPs typically cover topics like prohibited activities, privacy expectations, and consequences for policy violations, thereby fostering responsible digital behaviour.

Backup and Recovery Procedures

Backup involves creating copies of data that can be used to restore the original in case of data loss or corruption. Recovery procedures detail the steps to restore systems and data from these backups. Different backup types exist (full, incremental, differential), and storage locations vary (local, offsite, cloud). Regular testing of backups is vital to ensure their reliability and effectiveness in a disaster recovery scenario.

Types of Malware

Malware refers to software designed to cause damage or gain unauthorised access. Key types include:

• Viruses: Attach to legitimate programs and spread when executed.
• Worms: Self-replicating and spread across networks independently.
• Trojans (Trojan Horses): Disguise themselves as useful software to trick users into installing them, then perform malicious actions.
• Ransomware: Encrypts a victim's files and demands a payment (ransom) to restore access.
• Key loggers: Record keystrokes made by a user, often to steal login credentials or other sensitive information.

Exploiting Vulnerabilities and Social Engineering

Hackers exploit two primary avenues: technical vulnerabilities and human psychology.

• Technical Vulnerabilities: These are weaknesses in software or hardware. Examples include unpatched software (software with known security flaws that haven't been fixed by updates) and outdated anti-malware (security software that isn't regularly updated and thus cannot detect new threats).
• Social Engineering: This involves manipulating people to bypass security procedures or give up confidential information. Common tactics include phishing (deceptive emails), pretexting (creating a fabricated scenario), and baiting (luring victims with tempting offers).