Security Concepts and Kinds of Security Breaches
Explains basic terms like threat, vulnerability, risk, attack and different types of breaches that happen when security is broken.
<h2><br>
<br> Detailed Explanation:
<br>
<br> PART A: SECURITY CONCEPTS - 6 Basic Terms
<br>
<br>1. Asset: <span style="font-weight: normal;">What we want to protect. Ex: Data, Laptop, Server, Website.
</span><br>
<br>2. Vulnerability: <span style="font-weight: normal;">Weakness in system that can be exploited. Ex: Weak password 123456, No antivirus, Open WiFi.
<br></span>
<br>3. Threat: <span style="font-weight: normal;">Possible danger that can harm asset using vulnerability. Ex: Hacker, Virus, Flood, Angry employee.
<br></span>
<br>4. Attack: <span style="font-weight: normal;">Threat actually happening. Threat becomes action. Ex: Hacker actually using weak password to login.
</span><br>
<br>5. Risk: <span style="font-weight: normal;">Chance that threat will exploit vulnerability and cause loss. </span></h2><h2><span style="font-weight: normal;">Formula:
<br>Risk = Threat x Vulnerability x Impact<br></span>
<br>6. Security Control: <span style="font-weight: normal;">Solution to reduce risk. Ex: Firewall, Antivirus, Strong password.
</span><br>
<br> PART B: SECURITY CONCEPTS - CIA TRIAD + 2 Extra
<br>
<br>This is the main security concept:
<br>
<br>1. Confidentiality: <span style="font-weight: normal;">No one can READ data illegally. Ex: Your password should be secret.</span></h2><h2>2. Integrity: <span style="font-weight: normal;">No one can CHANGE data illegally. Ex: No one can change your marks in</span> <span style="font-weight: normal;">database.</span></h2><h2>3. Availability: <span style="font-weight: normal;">System is AVAILABLE when needed. Ex: College website should be open</span> <span style="font-weight: normal;">during admission.</span></h2><h2>4. Authenticity:<span style="font-weight: normal;"> Proof that user is real. Ex: OTP proves it is you.</span></h2><h2>5. Non-Repudiation:<span style="font-weight: normal;"> Person cannot deny his action. Ex: After sending money on UPI, sender cannot say "I didn't send".</span></h2><h2> PART C: KINDS OF SECURITY BREACHES - 4 Types of Breach
<br>
<br>A breach means security rule is broken.
<br>
<br>1. Confidentiality Breach -<span style="font-weight: normal;"> Data is READ illegally:<br>- Hacker reads your Aadhaar data.</span></h2><h2><span style="font-weight: normal; color: rgb(0, 0, 0);">- Example: SQL Injection to steal database, Packet sniffing on public WiFi.</span></h2><h2>
<br>2. Integrity Breach - <span style="font-weight: normal;">Data is CHANGED illegally:<br>- Hacker changes data.</span></h2><h2><span style="font-weight: normal;">- Example: Changing balance in bank account from 1000 to 100000, Changing marks.
</span><br>
<br>3. Availability Breach - <span style="font-weight: normal;">System is DOWN / BLOCKED:<br>- Legit users cannot access system.</span></h2><h2><span style="font-weight: normal;">- Example: DDoS attack on website, Ransomware locks your laptop.
</span><br>
<br>4. Authenticity Breach - <span style="font-weight: normal;">Fake Identity:<br>- Attacker pretends to be someone else.</span></h2><h2><span style="font-weight: normal;">- Example: Fake email from principal, IP spoofing, Fake login page.
</span><br>
<br>5. Physical Breach [for Computer Security]:<br><span style="font-weight: normal;"> Laptop theft, Hard disk stolen from lab, Breaking server room lock.
</span><br>
<br></h2><div><br></div>