Fundamentals of cybersecurityTopics

This topic introduces the fundamental concepts, objectives, and role of cybersecurity in the modern digital environment. the concepts of cybersecurity and information security, including their distinctive and interconnected characteristics, are examined. key concepts such as assets, threats, vulnerabilities, risks, attacks, and security incidents are explained. the CIA triad—confidentiality, integrity, and availability—as well as fundamental security principles such as authentication, authorization, and accountability are explored. the interconnected roles of people, processes, and technology in ensuring cybersecurity are also examined.

This topic introduces the fundamental concepts, architecture, and operating principles of the gnu/linux operating system. the linux kernel, file system, users and groups, access permissions, processes, and the main characteristics of the command-line interface are examined. basic linux commands, file and directory management, system information retrieval, and network configuration verification are discussed. the topic also introduces kali linux, its main features and applications in cybersecurity and security testing, as well as the general categories of security tools included in the distribution.

This topic examines the nature, objectives, and role of penetration testing in assessing the security of information systems. the main stages of penetration testing are discussed, including planning, defining the scope and rules of engagement, information gathering, scanning and vulnerability analysis, controlled exploitation, evaluation of results, and reporting. the characteristics and practical differences between black-box, white-box, and grey-box testing approaches are explained. the topic also covers major methodological approaches, legal and ethical requirements, documentation of test results, and principles for developing recommendations for vulnerability remediation.

This topic examines the role and objectives of reconnaissance and information gathering in cybersecurity and penetration testing. passive and active information-gathering approaches used to obtain information about target systems, networks, and organizations are discussed. methods for collecting information from open sources (osint), including domains, IP addresses, DNS records, network infrastructure, and exposed services, are examined. the topic also covers the organization and analysis of collected information, its use in subsequent security assessment stages, and compliance with legal and ethical requirements during information-gathering activities.

This topic examines the identification, assessment, and management of security vulnerabilities in information systems. the causes and main types of vulnerabilities, as well as the risks they pose to systems, are discussed. the principles of vulnerability detection, validation, risk assessment, and prioritization are explained. mechanisms such as CVE and CVSS for vulnerability identification and assessment, analysis of automated scanning results, and identification of false positives are examined. the topic also covers vulnerability remediation, application of updates and security patches, selection of compensating controls, and verification of implemented remediation measures through retesting.

This topic examines the main stages and principles of system hacking methodology used in the security assessment of information systems. the analysis of information obtained about target systems and identified vulnerabilities, controlled acquisition of system access, and assessment of the obtained access level are discussed. risks associated with user accounts and credentials, weaknesses in authentication mechanisms, access acquisition, and privilege escalation are explained. the topic also examines the assessment of the security impact of obtained access, documentation of activities, and restoration of the system to its initial state after testing.

This topic introduces the concept of social engineering and the role of the human factor in cybersecurity. approaches that exploit human trust, behavioral characteristics, and psychological tendencies to obtain information or bypass security mechanisms are examined. the main characteristics of common social engineering techniques, including phishing, spear phishing, pretexting, and baiting, are explained. the topic also covers the identification of indicators of social engineering attacks, improvement of user security awareness, implementation of security policies, and key defensive measures for reducing human-related cybersecurity risks.

This topic examines the assessment of obtained access levels, privilege escalation, and access control mechanisms in information systems. the concepts of horizontal and vertical privilege escalation, differences between user and administrator privileges, and risks arising from misconfigurations and security vulnerabilities are discussed. the role of user accounts, access rights, authentication, and authorization mechanisms in system security is explained. the topic also covers the principle of least privilege, restriction of access rights, protection of privileged accounts, and key security measures for preventing unauthorized access.

This topic examines the nature, main characteristics, and impact of distributed denial-of-service (ddos) attacks on the availability of information systems. the differences between dos and ddos attacks, the role of botnet infrastructures, and the main characteristics of volumetric, protocol-based, and application-layer ddos attacks are discussed. principles for distinguishing malicious traffic from legitimate user traffic, identifying key indicators of ddos attacks, and assessing their impact are explained. the topic also examines major ddos defense mechanisms, including traffic filtering, rate limiting, firewalls, ids/ips systems, load balancing, and distributed protection mechanisms.

This topic examines major security risks in web applications and common types of attacks targeting them. the architecture and attack surface of web applications, as well as security risks associated with data exchange between users, servers, databases, and other components, are discussed. major web application security risks identified within the OWASP top 10 framework, including access control, authentication, data protection, injection, insecure design, and security misconfiguration, are explained. the topic also covers the identification of web application vulnerabilities, assessment of their potential impact, and principles for mitigating associated risks through secure programming, input validation, proper configuration, and other defensive measures.

This topic examines the main security characteristics of wireless networks, associated threats, and defense mechanisms. security risks arising from the characteristics of wireless communication environments, including unauthorized access, traffic interception, rogue access points, and communication disruption, are discussed. the main characteristics and differences between wep, wpa, wpa2, and wpa3 security mechanisms are explained. the topic also covers authentication, access control, and encryption mechanisms in wireless networks, secure configuration principles, and key defensive measures.

This topic examines the fundamental ethical principles and legal requirements that must be considered when conducting cybersecurity activities. the distinction between authorized and unauthorized access to information systems, professional responsibility, privacy, and personal data protection principles are discussed. the importance of conducting security testing only within predefined authorization and scope, protecting acquired information, and using it responsibly is explained. major legal approaches related to cybercrime, unauthorized access to or modification of data, interference with system operations, and other unlawful activities are examined. the topic also covers professional ethics for cybersecurity specialists, responsible vulnerability disclosure, and compliance with national and international legal frameworks.

This topic examines the opportunities and security risks associated with the use of generative artificial intelligence technologies in cybersecurity. the fundamental operating principles of generative AI and the applications of large language models in cybersecurity are introduced. the use of generative AI for security data analysis, threat detection, incident response, vulnerability analysis, and automation of security processes is discussed. at the same time, risks associated with the malicious use of these technologies for social engineering, generation of deceptive content, and other harmful activities are examined. the topic also covers prompt injection, data leakage, unreliable outputs, model misuse, and privacy risks, together with principles for the secure and responsible use of generative AI systems.