Cyber Awareness & Security Fundamentals

Phreaking is the practice that emerged in the 1960s and 1970s, where hackers manipulated telephone systems to make free calls or gain unauthorized access. By exploiting the analog phone network, phreakers used various techniques, including the use of tones and devices like the "blue box," to control phone lines and bypass billing systems. This method played a significant role in the early days of hacking, focusing specifically on telecommunications, making it the oldest technique associated with phone hacking.

A 'sandbox' in cyber security serves as a controlled environment where suspicious or untrusted programs can be executed without risking harm to the main system. This isolation allows security professionals to analyze the behavior of potentially malicious software, identifying threats and vulnerabilities without compromising the overall network. By observing how the program interacts within the sandbox, experts can determine its intent and mitigate risks effectively. This proactive approach enhances overall security by allowing for thorough examination before any software is deemed safe for wider deployment.

AES stands for Advanced Encryption Standard, which is a widely used symmetric encryption algorithm established by the U.S. National Institute of Standards and Technology (NIST) in 2001. It replaces the older Data Encryption Standard (DES) and is recognized for its security and efficiency in encrypting sensitive data. AES operates on fixed block sizes and supports key lengths of 128, 192, or 256 bits, making it a robust choice for various applications, including secure communications and data protection. Its adoption by governments and organizations worldwide underscores its reliability and effectiveness in safeguarding information.

A Man-in-the-Middle (MITM) attack occurs when an attacker secretly intercepts and relays communication between two parties. By positioning themselves between the sender and receiver, the attacker can capture, alter, or redirect the data being transmitted. This type of attack often involves using a fraudulent server that masquerades as a legitimate endpoint, allowing the attacker to manipulate the communication without the knowledge of either party involved. This makes MITM attacks particularly dangerous, as they can compromise sensitive information without raising immediate suspicion.

RC4 is a symmetric key algorithm that employs a streaming cipher to encrypt data. Unlike block ciphers, which encrypt data in fixed-size blocks, streaming ciphers like RC4 process data one byte or bit at a time, allowing for faster encryption of streams of data. This makes RC4 particularly suitable for applications requiring real-time data encryption, such as SSL/TLS for secure web communications. Its simplicity and speed contributed to its widespread use, although security vulnerabilities have led to a decline in its adoption in favor of more secure algorithms.

August Kerckhoffs is recognized as the father of computer security primarily for his foundational principles in cryptography, particularly the Kerckhoffs's Principle, which states that a cryptographic system should be secure even if everything about the system, except the key, is public knowledge. This principle emphasizes the importance of key secrecy and has significantly influenced modern security practices, making his contributions pivotal in the development of secure communication and computer security as a whole.

A Trojan is a type of malware that disguises itself as a legitimate program to trick users into downloading and executing it. Unlike viruses and worms, which replicate and spread autonomously, Trojans do not self-replicate. Instead, they rely on social engineering to be installed by users, often leading to unauthorized access or data theft. This characteristic differentiates them from other types of malware that propagate through networks or infected files.

A digital signature is a cryptographic technique that ensures the integrity and authenticity of a message. It uses a hash function to create a unique digest of the message, which is then encrypted with the sender's private key. This process allows the recipient to verify that the message has not been altered and confirms the identity of the sender. By validating the digital signature with the sender's public key, the recipient can ensure both the integrity of the message and its origin, making it a reliable method for verifying message integrity.

A firewall is a security device that monitors and controls incoming and outgoing network traffic based on predetermined security rules. It acts as a barrier between a trusted internal network and untrusted external networks, filtering data packets to prevent unauthorized access and potential threats. Firewalls can be hardware-based, software-based, or a combination of both, ensuring that only legitimate traffic is allowed while blocking harmful data, thus protecting the network from cyberattacks and breaches.

Steganography is a technique used to conceal information within other non-secret data, such as images or audio files. By embedding hidden messages in plain sight, it reduces the likelihood of detection and potential data leakage. Unlike encryption, which scrambles data to prevent unauthorized access, steganography focuses on hiding the existence of the data itself, making it a valuable tool for maintaining privacy and security in communications. This method helps ensure that sensitive information remains undetected by unauthorized parties.

Stuxnet is classified as a worm because it is a self-replicating program that spreads across networks without user intervention. Unlike viruses, which require a host file to propagate, worms can move independently, exploiting vulnerabilities in software to infect other systems. Stuxnet specifically targeted industrial control systems, demonstrating its ability to cause physical damage while also spreading itself. Its design allowed it to infiltrate and manipulate critical infrastructure, marking it as a sophisticated and targeted cyber weapon rather than a typical malicious program.

WEP (Wired Equivalent Privacy) is considered the least strong encryption standard among the options listed. It was designed to provide a wireless local area network (WLAN) with a level of security comparable to that of wired networks. However, WEP has significant vulnerabilities, including weak key management and easily exploitable encryption methods, making it susceptible to attacks. In contrast, AES (Advanced Encryption Standard), RSA (Rivest-Shamir-Adleman), and DES (Data Encryption Standard) offer stronger security measures, with AES being the most secure and widely used today.

The term 'hacker' originated at the Massachusetts Institute of Technology (MIT) in the 1960s. It was used to describe individuals who enjoyed exploring computer systems and programming, often pushing the limits of technology for creative and innovative purposes. This positive connotation emphasized problem-solving and ingenuity rather than malicious intent. MIT's culture fostered an environment where students engaged in collaborative learning and experimentation, leading to the broader adoption of the term in computer science and technology communities.

Black Hat Hackers are individuals who exploit vulnerabilities in computer systems and networks with the intent of stealing data, financial information, or causing harm. Unlike ethical hackers, who aim to improve security, Black Hat Hackers operate outside the law, driven by personal gain. Their activities can include identity theft, fraud, and the distribution of malware, making them a significant threat in the realm of cybersecurity.

A cyber attack refers to any deliberate attempt to breach the security of a computer system or network, with the intent to cause harm, disrupt operations, or steal data. This can involve various techniques, such as exploiting vulnerabilities, deploying malware, or launching denial-of-service attacks. Unlike malware or phishing, which are specific methods of attack, a cyber attack encompasses a broader range of malicious activities aimed at compromising the integrity, confidentiality, or availability of information systems.

A buffer overflow attack occurs when a cyber-criminal exploits a vulnerability in a program by sending more data to a buffer than it can handle. This excess data can overwrite adjacent memory, allowing the attacker to inject malicious code or special instructions. When executed, this code can lead to unauthorized access or control of the system, enabling the attacker to manipulate or compromise the system's integrity. Buffer overflow vulnerabilities are particularly dangerous because they can be triggered by seemingly benign inputs, making them a common target for exploitation.

Pharming is a cyber attack that redirects users from legitimate websites to fraudulent ones without their knowledge. This technique manipulates the user's browser or exploits vulnerabilities in the DNS system, making it appear as though they are visiting a trusted site. As a result, unsuspecting users may inadvertently provide sensitive information, such as passwords or credit card details, to the attackers. Unlike phishing, which typically involves deceptive emails, pharming operates at a deeper technical level, making it harder for users to detect the scam.

Nation/state sponsored hackers are individuals employed by governments to protect national interests and infrastructure from cyber threats. They possess advanced skills in cybersecurity and often engage in both defensive and offensive operations to safeguard sensitive information and maintain national security. Unlike white hat hackers, who typically work independently or for private organizations, these hackers operate under the direction of government agencies, making them integral to a country's cyber defense strategy.

In the 1970s, the proliferation of personal computers and the development of early networks marked a significant shift in technology. This era saw the emergence of computer systems that were increasingly accessible to individuals, leading to the first instances of unauthorized access and manipulation of data. As more people began to explore and exploit vulnerabilities in these systems, hacking transitioned from a theoretical concept to a practical crime, raising concerns about security and privacy in the burgeoning field of cyber technology.

William Gibson, a science fiction writer, introduced the term 'cyberspace' in his 1984 novel "Neuromancer." He used it to describe a virtual reality data space where computer networks and digital information coexist, reflecting the growing influence of technology on society. Gibson's depiction of cyberspace has significantly shaped our understanding of the internet and virtual environments, making the term synonymous with digital communication and online interactions. His work has had a lasting impact on both literature and the tech industry, highlighting the merging of human experience with digital landscapes.