Lesson 2: Common Cybersecurity Threats and Attacks

Objectives:

• Recognize and classify common cyber threats and attacks.
• Understand the nature of these attacks through real-world demonstrations.
• Learn how to mitigate common cyber threats.

1. Introduction to Cybersecurity Threats Definition and Explanation:
   • Cybersecurity threats refer to potential dangers that can exploit vulnerabilities in digital systems, leading to unauthorized access, damage, or disruption of data and services. These threats can come in many forms, including malware, phishing, ransomware, and more.
   • Importance: Recognizing and understanding these threats is crucial for developing effective defenses. Awareness of common threats allows individuals and organizations to implement appropriate protective measures and reduce the risk of successful attacks.
   Supplementary Resources:
   • Textbook:
     • Computer Security: Principles and Practice by Stallings & Brown.
       • Chapter 2: Computer Security Technology and Principles provides an overview of common cyber threats and the importance of defending against them.
   • Online Resource:
     • Cyber Security Tools (2024 Guide) | BrainStation®
       • Offers insights into various cybersecurity tools and how they help in recognizing and managing threats.
2. Classification of Cyber Attacks Definition and Explanation:
   • Cyber attacks are deliberate attempts by attackers to breach information systems, steal data, or cause harm to a network. Attacks can be classified based on their methods and objectives, including:
     • Phishing: Deceptive attempts to obtain sensitive information by masquerading as a trustworthy entity in electronic communications.
     • Malware: Malicious software designed to disrupt, damage, or gain unauthorized access to a system.
     • Ransomware: A type of malware that locks or encrypts the victim’s data, demanding payment for its release.
     • DDoS (Distributed Denial of Service): Overwhelming a system with traffic to make it unavailable to users.
   • Examples: Discuss real-world incidents like the WannaCry ransomware attack, which affected thousands of systems worldwide.
   Supplementary Resources:
   • Textbook:
     • Analyzing Computer Security: A Threat/Vulnerability/Countermeasure Approach by Pfleeger & Pfleeger.
       • Chapter 7: Threats and Attacks categorizes and explains various cyber attacks and their characteristics.
   • Online Resource:
     • NIST Cybersecurity Framework
       • Provides guidelines and best practices for managing and responding to different types of cyber attacks.
3. Demonstration of Common Attacks Definition and Explanation:
   • This section includes live or video demonstrations of typical cyber attacks to illustrate how they are executed and their impact on systems. For example, a phishing attack demonstration might show how a fraudulent email can trick users into providing sensitive information.
   • Analysis: Breaking down the demonstration to explain the methods used by attackers and the vulnerabilities they exploit.
   Supplementary Resources:
   • Tool:
     • Wireshark
       • A tool that can be used to monitor network traffic and detect signs of attacks in real-time.
   • Video Resource:
     • Introduction to Phishing and Social Engineering
       • A video resource explaining phishing techniques and how they are commonly executed.
4. Mitigation Strategies Definition and Explanation:
   • Mitigation strategies are actions or tools designed to reduce the risk and impact of cyber threats. These might include the use of firewalls, antivirus software, regular software updates, and user training.
   • Demonstrations: Practical examples of how to implement these strategies, such as configuring a firewall or setting up multi-factor authentication to protect against unauthorized access.
   Supplementary Resources:
   • Textbook:
     • Computer Security: Principles and Practice by Stallings & Brown.
       • Chapter 8: Intrusion Detection and Prevention covers techniques to detect and mitigate cyber threats.
   • Tool:
     • Heimdal Security
       • A comprehensive security suite that provides threat detection and mitigation tools.
5. Review and Q&A Definition and Explanation:
   • This segment serves to summarize key points from the lesson, reinforcing the understanding of common cybersecurity threats and attacks. The Q&A session allows learners to clarify any doubts, discuss potential challenges, and solidify their grasp of the material through active participation.
   Supplementary Resources:
   • Interactive Resource:
     • Graham Cluley Blog
       • A resource where learners can explore current trends and ask questions about ongoing cybersecurity threats and defenses.