3 answers
Victor
Student
Stockton-on-Tees, England, United Kingdom
1
Question
Asked
236 views
What is the meaning of cyber security?
I love playing football though and also interested in anything Computing, I wish my questions can be answered as quickly as possible... thanks for your cooperation
Login to comment
3 answers
Edmond Momartin ☁️
Public Cloud Security & Compliance AT&T | MBA InfoSec | OWASP-LA Board
65
Answers
Los Angeles, California
Updated
Edmond’s Answer
"Cyber" is the simplified version of "Cybernetics", coined in a book published in 1948, how systems within machines and animals regulate themselves and interact w/ their environment, however it is now more about computers and digital communication. So cybersecurity would be primarily addressing the security of those systems.
If you want to get a big picture of what that means specifically, the Career Options" section of https://niccs.cisa.gov/education-training/cybersecurity-students would be a good place to start.
You can also check UK's National Cyber Security Centre (NCSC) at https://www.ncsc.gov.uk/section/education-skills/schools which might have better resources closer to home.
Good luck!
If you want to get a big picture of what that means specifically, the Career Options" section of https://niccs.cisa.gov/education-training/cybersecurity-students would be a good place to start.
You can also check UK's National Cyber Security Centre (NCSC) at https://www.ncsc.gov.uk/section/education-skills/schools which might have better resources closer to home.
Good luck!
Rafael Diaz Montelongo
Consultant
235
Answers
Raleigh, North Carolina
Updated
Rafael’s Answer
Hi Victor! Happy to see you're interested in the field of Cybersecurity. Cybersecurity is all about protecting computer systems, networks, and data from unauthorized access or damage which is very important nowadays. It is an essential field in today's digital age, as it helps individuals, organizations, and governments protect their sensitive information and maintain the security of their digital assets. It's great to hear that you love playing football and have an interest in computing! If you're interested, you can definitely pursue both your passion for football and your interest in cybersecurity. It's all about finding a balance between being a student-athlete!
Bruce Bonnick
Cyber Security
6
Answers
Washington, Washington
Updated
Bruce’s Answer
If we eliminate all the hype, buzzwords, and misinformation, Cyber Security is simply the implementation of Security on or relating to technology.
The root principle of security, is the balance between accessibility and security. I say balance because you can't have both. If something is secure, it is not accessible, and if it is accessible it is not secure.
For example, if you had information on your cellphone and wanted it completely secure. Take the cell phone, put it in a furnace and melt it down completely, and while it is still heated to a malleable state compress it into a ball or wafer, then break and distribute the pieces around the globe. The information is now secured and nobody can get to it.
To achieve balance, information security and by extension cyber security has at its core 3 tenets which represent the goals or points of assurance.
This is the CIA triad: Confidentiality, Integrity, and Availability
Confidentiality: Information is protected from being viewed by those it is not intended for.
Integrity: Information is protected from being modified, or changed by those who are not supposed to change it.
Availability: Information is available to those who are supposed to have access to it, when they want to have access to it.
Those 3 principles are leveraged alone or in some combination to provide security to a system, device, application, web site, etc.
How do you keep information confidential? Encryption
How do you maintain integrity? Track and account for changes
How do you maintain availability? Backups, fail over, shields and defensive measures
The Cyber Security industry is about implementing measures towards ensuring the CIA principles within the available budget.
This gets into Risk Management which is essentially a cost comparison between how much you spend on fixing a point of vulnerability versus the likely-hood that vulnerability will be exploited, and how much that being exploited will cost the organization
If you can wrap your head around these concepts as I've explained them and adopt a mindset to apply that to your view of cyber security, you should find it pretty easy to learn and explore.
The root principle of security, is the balance between accessibility and security. I say balance because you can't have both. If something is secure, it is not accessible, and if it is accessible it is not secure.
For example, if you had information on your cellphone and wanted it completely secure. Take the cell phone, put it in a furnace and melt it down completely, and while it is still heated to a malleable state compress it into a ball or wafer, then break and distribute the pieces around the globe. The information is now secured and nobody can get to it.
To achieve balance, information security and by extension cyber security has at its core 3 tenets which represent the goals or points of assurance.
This is the CIA triad: Confidentiality, Integrity, and Availability
Confidentiality: Information is protected from being viewed by those it is not intended for.
Integrity: Information is protected from being modified, or changed by those who are not supposed to change it.
Availability: Information is available to those who are supposed to have access to it, when they want to have access to it.
Those 3 principles are leveraged alone or in some combination to provide security to a system, device, application, web site, etc.
How do you keep information confidential? Encryption
How do you maintain integrity? Track and account for changes
How do you maintain availability? Backups, fail over, shields and defensive measures
The Cyber Security industry is about implementing measures towards ensuring the CIA principles within the available budget.
This gets into Risk Management which is essentially a cost comparison between how much you spend on fixing a point of vulnerability versus the likely-hood that vulnerability will be exploited, and how much that being exploited will cost the organization
If you can wrap your head around these concepts as I've explained them and adopt a mindset to apply that to your view of cyber security, you should find it pretty easy to learn and explore.