Cybersecurity : World of Experts and Criminals	

Certificate of completion (supplied by PasarTrainer)

Training Material

* The Cybersecurity World
* Cybersecurity Criminals vs Cybersecurity Specialists
* Common Threat
* Spreading Cybersecurity Threats and Creating More Experts.


The structure of the cybersecurity world and the reasons it continues to grow with data and information as the prized currency.
This module  also discussed the role of cyber criminals by examining what motivates them. It introduced the spread of threats due to the ever-expanding technical transformations taking place throughout the world.
Finally, the module explained how to become a cybersecurity specialist to help defeat the cyber criminals who develop the threats. It also discussed the resources available to help create more experts. While you must stay on the right side of the law, cyber security experts must have the same skills as cyber criminals.


Module 1. Cybersecurity World

* The Three Dimensions of the Cybersecurity Cube
* CIA Triad
* The States of Data
* Cybersecurity Countermeasures and IT Security Management


This module discussed the three dimensions of the cybersecurity cube. The central responsibility of a cybersecurity professional is to protect an organization’s systems and data. The chapter explained how each of the three dimensions contributes to that effort.


Module 2. The Cybersecurity Cube

* Malware and Malicious Code, Deception, and Attacks


Threats, vulnerabilities, and attacks are the central focus of cybersecurity professionals. This module discussed the various cybersecurity attacks that cybercriminals launch, the threat of malware and malicious code. 


Module 3. Threats, Vulnerability and Attacks 

* Cryptography, Access Controls and Obscuring Data


This module discussed the principles of cryptology used to secure communications. Also explained both symmetric and asymmetric encryption algorithms, compared the two algorithms, and provided examples of their use.



Module 4. The Art of Protecting Secrets

* Type of Data Integrity Controls 
* Digital Signatures and Digital Certificates


This module discussed how the art of integrity ensures that data remains unchanged by anyone or anything over its entire life cycle. Start by discussing the types of data integrity controls. Hashing algorithms, password salting, and keyed-hash message authentication code (HMAC) are important concepts for the cyber heroes to use in the implementation of digital signatures and certificates. These tools provide a way for cybersecurity specialists to verify the authenticity of messages and documents.


Module 5. The art of Ensuring Integrity

* High Availability
* Measures to Improve Availability
* Incident Response and Disaster Recovery


This module began by explaining the concept of five nines, a high availability standard that allows for 5.26 minutes of downtime per year. Also discussed how an organization responds to an incident by establishing procedures that it follows after an event occurs. 


Module 6. The Five Nine Concepts 

* Defending Systems and Devices
* Server Hardening
* Network Hardening and Physical Security.


This module discussed the technologies, processes, and procedures that cybersecurity professionals use to defend the systems, devices, and data that make up the network infrastructure. Host hardening includes securing the operating system, implementing an antivirus solution, and using host-based solutions such as firewalls and intrusion detection systems. Server hardening includes managing remote access, securing privileged accounts, and monitoring services.
Data protection includes file access control and implementing security measures to ensure the confidentiality, integrity, and availability of data.
Device hardening also involves implementing proven methods of physically securing network devices. Protecting your cybersecurity domain is an ongoing process to secure an organization’s network infrastructure and requires constant vigilance when monitoring threats."


Module 7. Protecting a Cybersecurity Domain

Many of the world’s original hackers were computer hobbyists, programmers, and students during the ’60s. Originally, the term hacker described individuals with advanced programming skills. Hackers used these programming skills to test the limits and capabilities of early systems. These early hackers were also involved in the development of early computer games. The Internet published in 1996 added to the mystique of the hacking culture. . Many hacking groups today embrace this imagery. One of the most infamous hacker groups goes by the name Legion of Doom. It is important to understand the cyber culture in order to understand the criminals of the cyber world and their motivations.

After completion of this program, participants will be better able to:
* Describe the characteristics of criminals and heroes in the cybersecurity realm.
* Describe the principles of confidentiality, integrity, and availability as they relate to data states and cybersecurity countermeasures.
* Describe the tactics, techniques, and procedures used by cybercriminals.
* Describe how technologies, products, and procedures are used to protect confidentiality.
* Describe how technologies, products, and procedures are used to ensure integrity.
* Describe how technologies, products, and procedures provide high availability.
* Explain how cybersecurity professionals use technologies, processes, and procedures to defend all components of the network.
* Explain the purpose of laws related to cybersecurity.
