Fundamentals of Information SecurityTopics

This topic introduces the fundamental concepts, objectives, and principles of information security. it develops foundational knowledge of confidentiality, integrity, and availability (the CIA triad), information assets, threats, vulnerabilities, risks, and security controls.

This topic examines the main types of modern cyber threats, their characteristics, and their impact on information systems. it covers viruses, worms, trojans, ransomware, spyware, and other forms of malware, as well as dos/ddos attacks, phishing, password attacks, and other cyberattack techniques.

This topic explores the role of the human factor in cybersecurity and the techniques used in social engineering attacks. it examines phishing, pretexting, baiting, impersonation, and other manipulation techniques, as well as methods for improving user security awareness and protecting against social engineering attacks.

This topic examines the multi-layered defense approach used to protect information systems against various threats. it explores the implementation of security mechanisms at the network, application, data, user, and physical security levels, emphasizing how complementary security controls strengthen overall protection.

This topic examines cyber threats affecting artificial intelligence and autonomous systems, along with methods for protecting them. it explores the use of AI to detect and prevent cyber threats, as well as attacks targeting AI systems, data manipulation, and model security issues.

This topic examines the principles of identifying and authenticating users and systems and managing access rights to resources. it covers password policies, multi-factor authentication (mfa), biometric authentication, role-based access control (rbac), and other access control models.

This topic explores the principles of securing networks and email environments. it examines secure communication protocols, encryption, firewalls, virtual private networks (vpns), intrusion detection and prevention systems (ids/ips), email filtering mechanisms, and methods for protecting against email-based attacks.

This topic examines the security characteristics, common vulnerabilities, and protection mechanisms of wireless networks. it covers wi-fi security standards, encryption and authentication methods, attacks targeting wireless networks, and secure configuration principles.

This topic explores the principles of securing operating systems and software applications. it examines vulnerability detection, patch and update management, restriction of user privileges, secure programming, and essential application-level security mechanisms.

This topic examines methods for preventing unauthorized access to, use of, and transmission of sensitive and confidential information. it covers the operating principles of DLP systems, data classification, encryption, and security measures for protecting data during storage and transmission.

This topic explores the legal and ethical aspects of information security. it examines personal data protection, the lawful use of information resources, cybercrime, copyright, and international standards and frameworks related to information security.

This topic examines methods for identifying, analyzing, assessing, and managing information security risks. it covers asset identification, threat and vulnerability analysis, risk level assessment, and the selection of appropriate security measures to mitigate identified risks.

This topic examines the processes of detecting, analyzing, responding to, and recovering from cybersecurity incidents. it covers the functions of a security operations center (soc), the operating principles of SIEM systems, log collection and correlation, threat monitoring, and the stages of incident response.

This topic explores the principles of collecting, preserving, and analyzing digital evidence following cybersecurity incidents. it examines evidence acquisition from disks, memory, network traffic, and other digital sources, as well as the development of business continuity and disaster recovery plans.

This topic examines current developments and emerging threats in cybersecurity. it covers cloud security, iot security, zero trust, ai-based security, automated defense, mobile security, and other relevant technologies and approaches