What Is Cybersecurity? Fundamentals to Understand Before Learning Hacking

When hearing the term "Cybersecurity" many people immediately picture hackers breaching systems, typing rapidly at green-text terminals (lol), or launching attacks on websites. In reality, however, cybersecurity encompasses far more than just hacking activities.

In today's digital era, almost all our activities rely on technology. Everything from social media, banking services, and online shopping to personal data storage takes place over the internet. As technology usage grows, so do cyber threats, targeting both individuals and companies.

Cybersecurity exists to protect systems, networks, applications, and data from these various threats. Understanding the basics of cybersecurity is a crucial first step before delving into penetration testing, bug bounties, digital forensics, or even Capture The Flag (CTF) competitions. In this article, we will discuss the cybersecurity fundamentals that every beginner needs to understand.

What Is Cybersecurity?

Cybersecurity is the practice of protecting computer systems, networks, applications, devices, and data from unauthorized access, attacks, damage, or information theft.

Simply put, cybersecurity aims to ensure that information remains secure and is accessible only to authorized or permitted parties.

Cybersecurity is not used solely by large corporations or governments. In reality, every internet user needs cybersecurity to protect:

1. Email accounts
2. Social media
3. Mobile banking
4. Personal data
5. Important documents
6. Work-related information and more. Without adequate protection, such data and information could be stolen, modified, or even destroyed by irresponsible parties.

Why Is Cybersecurity Important?

Every day, vast amounts of data move across the internet. Alongside this, various types of cyber threats continue to emerge.

Imagine if:

• Your email account is hacked.
• Your social media password is stolen or changed by someone else.
• A company's customer data is leaked online.
• A hospital system becomes inaccessible due to ransomware.
• A business website goes offline following a DDoS attack.

The consequences include not only financial loss but also a loss of user trust and damage to an organization's reputation. Therefore, cybersecurity has become one of the most critical aspects of the modern technological landscape.

The CIA Triad: The Core Foundation of Cybersecurity

If there is one concept that anyone wishing to learn cybersecurity must understand, it is the CIA Triad. The CIA Triad is a fundamental model used to maintain information security and serves as the foundation for almost all modern security policies.

CIA stands for:

1. Confidentiality

2. Integrity

3. Availability Let's discuss each of them

4. Confidentiality Confidentiality is the principle ensuring that information is accessible only to authorized parties. The primary goal of confidentiality is to safeguard data and prevent it from falling into the wrong hands. Examples :

• User account passwords
• Customer data
• Credit card information
• Patient health data
• Corporate documents If someone gains unauthorized access to such data, confidentiality has been breached. Ways to Maintain Confidentiality Some commonly used mechanisms include:

1. Encryption Multi-Factor Authentication (MFA)
2. Access Control
3. Role-Based Access Control (RBAC)
4. Password Policy For instance, when you use internet banking with two-factor authentication, the system is applying the principle of confidentiality.
5. Integrity Integrity ensures that data remains accurate, consistent, and free from unauthorized modification. Information altered by unauthorized parties can no longer be trusted. Examples : If a student successfully changes a grade from a C to an A without authorization, data integrity has been compromised. And other examples, Alteration of bank transaction data, Manipulation of financial reports, Modification of customer data. Integrity can be maintained through the following methods:
6. Hashing
7. Digital Signatures
8. Audit Logs
9. Version Control
10. Checksum Verification These techniques help ensure that data remains secure and identical to its original state.
11. Availability Availability ensures that systems and data are accessible to users when needed. Data that is secure but inaccessible can also create major problems. Examples :

• School registration websites
• Hospital systems
• Mobile banking
• Corporate servers If a website experiences downtime for hours, users cannot access the services they need. Some common threats :

1. DDoS attacks Server failures
2. Hardware damage
3. Power outages
4. Ransomware And how to maintain availability :
5. Data backups
6. Redundancy
7. Disaster Recovery Plans
8. Load balancing
9. System monitoring Availability is the reason why large companies maintain multiple backup servers and infrastructure distributed across various locations.

Most Common Cyber ​​Threats

Having understood the CIA Triad, we need to look at some threats frequently encountered in the real world.

1. Malware Malware is malicious software designed to damage systems or steal information. Common types of malware :
2. Virus
3. Worm
4. Trojan
5. Spyware
6. Ransomware
7. Phising Phishing is a fraudulent technique aimed at stealing sensitive information such as usernames, passwords, credit card details, and other sensitive data. It is typically carried out via :
8. Fake emails
9. Imitation websites (Most Common)
10. Instant messages
11. Social media Phishing attacks more often exploit human vulnerabilities and naivety rather than technological weaknesses.
12. Ransomware Ransomware is a type of malware that encrypts a victim's data and demands a ransom for its recovery; however, paying the ransom does not guarantee that all data will be restored. Consequently, if infected, the most likely outcome is the permanent loss of data — unless a decryption method exists for that specific type of ransomware. Ransomware attacks can result in :
13. Loss of data access
14. Operational disruption
15. Significant financial loss
16. Social Engineering (Soceng) Social engineering is a psychological manipulation technique used to gain unauthorized access or information by tricking the victim into divulging it unknowingly. Examples :
17. Impersonating IT staff
18. Claiming to represent a bank
19. Sending fake urgent messages, etc. Many attacks succeed not because of weak systems, but because people are deceived.
20. DDos Attack A Distributed Denial of Service (DDoS) attack aims to render a service inaccessible by flooding the server with massive amounts of traffic. Common targets :
21. Websites
22. APIs
23. Game servers
24. E-commerce platforms DDoS attacks primarily target the "Availability" aspect of the CIA Triad.

Cybersecurity Domains

Cybersecurity encompasses many specialized fields. Understanding the big picture will help you determine the right learning path.

1. Network Security Focuses on the security of networks and data traffic.
2. Application Security Focuses on the security of web, desktop, and mobile applications.
3. Cloud Security Focuses on the security of cloud infrastructure.
4. Digital Forensics Focuses on incident investigation and the collection of digital evidence.
5. Incident Response Focuses on handling incidents and recovery following an attack.
6. Penetration Testing Focuses on simulating attacks to identify vulnerabilities before attackers find them.

Cybersecurity Learning Roadmap for Beginners

One of the biggest mistakes beginners make is trying to learn hacking immediately without first understanding the fundamentals. Here is a more effective learning sequence:

1. Networking Fundamentals
2. Linux Fundamentals
3. Web & HTTP Fundamentals
4. Security Fundamentals
5. Penetration Testing Basics
6. Capture The Flag (CTF)
7. Advanced Security Topics By grasping these basics, the learning process will become much easier and more structured.

Conclusion

Cybersecurity is not just about hacking. It is a discipline dedicated to protecting systems, networks, applications, and data from various digital threats.

One of the most important foundations of cybersecurity is the CIA Triad, which consists of Confidentiality, Integrity and Availability. These three principles underpin the various security technologies and policies used today.

In addition to understanding the CIA Triad, beginners should also familiarize themselves with common threats such as malware, phishing, ransomware, social engineering, and DDoS attacks. This knowledge helps establish a security mindset before delving into more technical techniques.

In the next article, we will cover Networking Fundamentals for Cybersecurity — networking concepts that are essential to understand before exploring penetration testing, web security, or Capture The Flag (CTF) challenges.