Introduction
Hello, future Cybersecurity Analysts! Welcome to the start of your journey. Before we learn how to hack or defend, we must understand what we are defending.
In the world of information security, everything revolves around one core model: The CIA Triad. It provides three foundational goals for any security program. Recently, a fourth supporting concept, Non-Repudiation, has become equally critical for modern digital transactions.
The Analogy: A Secure Bank Vault
Imagine a high-security bank vault holding your life savings.
- Confidentiality: Only authorized customers with the correct key and biometric scan can open their specific deposit box. Random people cannot peek inside.
- Integrity: When you open your box, the gold bars you stored haven't been swapped for painted rocks. The contents are exactly as you left them.
- Availability: The bank is open during business hours. When you need your money, the vault door actually opens; it's not jammed shut due to a malfunction.
The CIA Triad
🔒 Confidentiality
Ensuring that data is acts only to authorized individuals, systems, or processes. It means keeping secrets secret.
Technological Examples:- Encryption (At rest and in transit)
- Access Control Lists (ACLs)
- Multi-Factor Authentication (MFA)
✅ Integrity
Ensuring the accuracy, consistency, and trustworthiness of data throughout its entire lifecycle. Data must not be altered in an unauthorized manner.
Technological Examples:- Hashing (e.g., SHA-256)
- Digital Signatures
- File Integrity Monitoring
📶 Availability
Ensuring that information and critical occur are accessible and usable by authorized users when needed.
Technological Examples:- Data Backups and Redundancy
- Load Balancing
- DDoS Mitigation
Supporting Concept: Non-Repudiation
Non-repudiation ensures that a party to a contract or a communication cannot deny having received a transaction nor can they deny having sent a transaction.
It combines Authentication (proving identity) with Integrity (proving the message hasn't changed). In practical terms, it means having undeniable legal proof of who did what.
Common Example: A legally binding digital contract signed via DocuSign or a bank transfer authorized by a certificate-based digital signature.
Student Activity: Triad Challenge
Read the scenario below. Determine which component of the CIA Triad (or Non-Repudiation) is primarily being attacked or defended. Click the correct button.