3 Essential Hygiene Tips
Start with the basics of protecting yourself online.
Read GuideBeginner Resources
Foundational concepts for those new to cybersecurity.
Getting Started
Cybersecurity is the practice of protecting systems, networks, and programs from digital attacks. These cyberattacks are usually aimed at accessing, changing, or destroying sensitive information; extorting money from users; or interrupting normal business processes.
Core Concepts Explained Simply
The CIA Triad
This is the model used to guide information security policies within an organization. Think of it as the three legs of a stool—if one is missing, security falls down.
🔒 Confidentiality (Privacy)
Keeping secrets secret. Only authorized people should be able to see specific data.
Analogy: Sending a sealed letter instead of a postcard.
🛡️ Integrity (Trust)
Ensuring data isn't changed or tampered with.
Analogy: A wax seal on an envelope ensuring it hasn't been opened or altered.
⚡ Availability (Access)
Making sure systems are up and running when you need them.
Analogy: A store being open during its posted business hours.
Authentication vs. Authorization
These two terms are often confused, but they mean very different things.
🆔 Authentication (Who you are)
Verifying that a person is who they say they are.
Analogy: Showing your ID badge to the security guard at the front desk.
🔑 Authorization (What you can do)
Determining what an authenticated user is allowed to do.
Analogy: Your key card only opening the 3rd floor marketing office, not the server room.
Types of Bad Software (Malware)
Malware is a catch-all term for "Malicious Software." Here are the common types:
- Virus: Code that attaches itself to clean files and spreads uncontrollable.
- Ransomware (Digital Blackmail): Locks you out of your data and demands payment to let you back in.
- Spyware (Digital Snooping): Hides on your device and records what you do, like typing passwords.
Common Terms You Should Know
- Phishing
- Tricking you into clicking bad links or giving up passwords, usually via email. It's called phishing because hackers throw out "bait" hoping someone bits.
- Firewall
- A digital guard at the gate of your computer network. It decides what data comes in and what goes out.
- Encryption
- Scrambling data so only the right people (who have the key) can read it. It turns "Hello" into "X9#jL!" until it's decrypted.