Information Security Essentials

This cheat sheet covers fundamental information security concepts, including network security, data protection, authentication, and common attack vectors. It provides a concise overview of key principles and practices for securing digital assets.

Core Principles

Firewalls are the first line of defense for networks.
Database security requires multiple layers and robust access controls.
NAT/PAT conserve IP addresses and manage network traffic.
Network hardening reduces the attack surface.
Switches and routers play crucial roles in network security.
SIEM systems provide centralized security monitoring and analysis.
The CIA Triad (Confidentiality, Integrity, Availability) is a core security model.
The Three D's (Defense, Detection, Deterrence) offer a layered security approach.
Proactive and reactive security approaches are both essential.
Application layer attacks exploit software vulnerabilities.
Risk analysis is key to proactive security planning.
Authentication verifies user identity before granting access.
Cryptography (symmetric/asymmetric) secures data.
PKI manages digital certificates for trust and secure communication.
IDS/IPS detect and prevent network intrusions.
Classic security models (Biba, Bell-LaPadula, Clark-Wilson) enforce access rules.
Wireless attacks require strong encryption and monitoring.
SSDLC integrates security throughout the software development process.
VoIP and Cloud computing have specific security considerations.
Web application security protects against common online threats.
Application security practices ensure secure software development.
Physical security complements cybersecurity.

Key Terms

Firewall: A network security device or software that monitors and controls incoming/outgoing traffic based on predefined rules.
Stateful Inspection: Tracks active connections to ensure incoming packets are part of a valid session, enhancing security.
Database Security: Measures to protect databases from unauthorized access, misuse, and data loss.
NAT (Network Address Translation): Maps private IP addresses to public IP addresses for internet access.
PAT (Port Address Translation): Maps multiple private IPs to a single public IP using port numbers.
Network Hardening: Securing a network by reducing vulnerabilities and enforcing strict security controls.
SIEM (Security Information and Event Management): Collects and analyzes security data from multiple sources for threat detection.
CIA Triad: Information security model comprising Confidentiality, Integrity, and Availability.
MFA (Multi-Factor Authentication): Uses two or more factors (e.g., password, OTP, biometrics) for enhanced security.
Symmetric Key Cryptography: Uses a single shared key for encryption and decryption.
Asymmetric Key Cryptography: Uses a pair of keys (public and private) for encryption and decryption.
PKI (Public Key Infrastructure): Framework for managing digital certificates and encryption keys.
IDS (Intrusion Detection System): Monitors network/system activities for malicious actions or policy violations.
IPS (Intrusion Prevention System): Detects and prevents malicious activities in real-time.
SSDLC (Secure Software Development Life Cycle): Integrates security practices into every phase of software development.