Cybersecurity As Relatable As Possible — ARAP Series #1 The Shield: Understanding the CIA Triad as…
2024-1-24 00:41:0 Author: infosecwriteups.com(查看原文) 阅读量:16 收藏

Cyb3r Philosoph3r 🌐

InfoSec Write-ups

image from: https://www.nist.gov

In a world full of technical mumbo jumbo, not everyone speaks the language of computers. Whether it’s a regular Joe on the street, an engineer specialized in oil rigs but clueless about tech, or even a 6-year-old enjoying some snacks, tech talk often sounds like gibberish to them.

Imagine asking the bricklayer about encryption — he will be likely met with a puzzled expression. Or explaining data breaches to an engineer fixated on drill components (even though he’s a technical professional in his field). As for the kid, well, biscuits are far more appealing than digital security lessons.

Because the goal of cybersecurity is awareness for safety and making everyone understand why they need to stay on guard every time. We need to find a common ground for simplifying things.

image from: https://www.istockphoto.com

That’s where analogies swoop in as superheroes. They’re the language that bridge the gap between the tech universe and our everyday world.

Analogies are the secret sauce to deciphering complex stuff like cybersecurity by linking it to relatable experiences or fictions.

Welcome to the ARAP series — an adventure into demystifying cybersecurity through analogies, aiming to enlighten newcomers and entertain the enthusiasts.

ARAP series; well, I don’t know how that sounds to a native but… you get the point, we are just trying to make things fun here.

Our journey today starts with the CIA Triad — a fundamental concept in cybersecurity. For enthusiasts, you definitely know what that means.

And for the layman, I promise it has nothing to do with undercover agents.

Let’s use castle’s defense: walls, gates, and guards to break down concepts.

Image from: https://www.cardiffcastle.com/rooms/library

In a majestic castle, housing a Royal Library. This library has sections accessible to everyone, but behind a secret bookshelf lies a chamber holding the kingdom’s classified secrets — trade agreements, confidential treaties, and more. Only the trusted few have access.

That’s confidentiality ! The cloak of secrecy around sensitive data. Encryption and access controls act as vigilant guards, allowing entry only to those with the right keys.

Beyond the castle walls, let’s relate this to everyday life. Think of your personal files — bank statements, private messages, or medical records — shielded by passwords and encryption. Just like the secret chamber in the castle, confidentiality ensures that only authorized users can access this sensitive information, safeguarding it from prying eyes.

Now, you get. The whole catch about confidentiality is this:

I SEND YOU A MESSAGE, AND NO ONE ELSE KNOWS WHAT THAT MESSAGE IS.

Now, picture a castle messenger, Bronne, entrusted with delivering a sealed message from the king to an ally.

waxed ! image from: https://www.pinterest.com

Tampering with the seal would mean altering the message — a breach of integrity.

Similarly, in the digital realm, integrity ensures data remains unadulterated. It’s the safeguard against tampering, using checksums and hashing to act as digital seals, detecting any unauthorized changes.

Let’s bring this closer to home. Consider sending an important email. Integrity ensures that the recipient receives the exact content you sent, free from alterations during transmission. It’s like a digital fingerprint ensuring the message’s authenticity, just as the royal seal on Bronne’s letter guarantees its integrity.

If we want to wrap up the idea of integrity. It will come like this:

I SEND YOU A MESSAGE, AND YOU RECEIVE EXACTLY WHAT I SEND YOU (WITHOUT ANY MODIFICATION).

image from: istock

Now, picture the castle’s drawbridge — a crucial link between the fortress and the world outside. That’s it ! The drawbridge for availability.

Similarly, in cybersecurity, availability ensures digital services and data remain accessible to authorized users, even during chaos or potential cyberattacks. Just as the drawbridge adapts to threats, digital mechanisms like load balancers and redundant servers ensure continued access.

In our digital world, think of online services — banking, shopping, or streaming — reliably accessible round the clock. Availability ensures these services remain uninterrupted, akin to the castle gates remaining open for loyal subjects despite external challenges.

So, the information is available to authorized users when needed. Which means:

I SEND YOU A MESSAGE, AND YOU ARE ABLE TO REICIEVE IT

To safeguard these vital elements, it’s important to heed a few key practices for preventing data breaches, loss, or any roadblocks in accessing your information.

You’ve probably heard it a hundred times, but it’s worth repeating: opt for 2-Factor Authentication whenever possible. It’s like an extra lock on your digital door, ensuring your confidentiality stays intact.

Maintain the integrity of your data by being cautious with system settings that might expose technologies like checksums and digital signatures. These are the digital safeguards ensuring your data stays unaltered and trustworthy.

And when it comes to availability, here’s the golden rule: back up, back up, and back up again! Think of it as your safety net against data unavailability. It’s a great place to start securing your digital assets.

To sum up, the CIA Triad serves as the cornerstone of cybersecurity — Confidentiality, Integrity, and Availability. These principles are the yardstick for gauging any system’s security.

They empower individuals and organizations, making cybersecurity less of a puzzle and more relatable. Think of them as the secrets in the castle, royal seal, and the accessible drawbridge.

Armed with this knowledge, you’re equipped to build your digital fortress. Just like a ruler fortifies their castle, you too can defend your digital dominion, leveraging the wisdom of the CIA Triad.


文章来源: https://infosecwriteups.com/cybersecurity-as-relatable-as-possible-arap-series-1-the-shield-understanding-the-cia-triad-as-4dd1070b3e06?source=rss----7b722bfd1b8d---4
如有侵权请联系:admin#unsafe.sh