1. Introduction to Network Security: Threats, Vulnerabilities, and Risks

Learning Objectives Define the core terms: threat, vulnerability, risk, asset, and exploit. Differentiate between a threat and a vulnerability in a given scenario. Explain the relationship between assets, threats, vulnerabilities, and risks. Identify potential network security threats and vulnerabilities in everyday digital activities. Apply a simple risk assessment model to a real-world scenario. Describe the three components of the CIA Triad (Confidentiality, Integrity, Availability). Ever worried about your gaming account or social media profile getting hacked? 🎮 Let's learn how the pros think about protecting digital stuff! This lesson introduces the fundamental concepts of network security. We will explore what threats, vulnerabilities, and risks are, and how the...

TermDefinitionExample AssetAnything of value to an individual or organization that needs to be protected.Your list of contacts, your saved game progress, your personal photos, or a company's customer database. VulnerabilityA weakness or flaw in a system, process, or control that could be exploited by a threat.Using a simple, easy-to-guess password like '123456' for your email account. This is a weakness in your security. ThreatAny potential danger that can exploit a vulnerability to damage or destroy an asset.A hacker who actively tries to guess passwords to break into accounts. The hacker is the danger. ExploitA piece of software, a chunk of data, or a sequence of commands that takes advantage of a vulnerability to cause unintended behavior.A program that automatically tri...

The Risk Relationship Formula Risk = Threat x Vulnerability This is a conceptual formula, not a mathematical one. It shows that risk only exists when a specific threat can take advantage of a specific vulnerability. If either the threat or the vulnerability is removed (becomes zero), the risk is eliminated. The CIA Triad Confidentiality, Integrity, Availability This is the primary model for guiding information security policies. Confidentiality ensures data is accessible only to authorized users. Integrity ensures data is accurate and trustworthy. Availability ensures that data and services are accessible when needed by authorized users. The Principle of Least Privilege A user should only have the minimum level of access or permissions needed to perform their job. Th...