Skip to main content

Module 9.1: C-I-A and the cybersecurity "kill cycle"

CIA is not just a secret branch of the government, it stands for three key parts of cybersecurity:

  1. Confidentiality: making sure what you store on your computer is not shared (data)
  2. Integrity: making sure your data is not changed in any way, e.g. a bank balancee
  3. Accessibility: making sure you can access the data, e.g. ransomware


Seven steps to breaking into a computer or network:
  1. recon: network scanning, ports (burglar looking around your house for open doors or windows)
  2. weaponization: create a weapon that can use these ports (doors, use a key or a brick?)
  3. delivery: deliver the weapon (send the code into the machine, burglar into your house)
  4. exploitation: execute the weapon (start up the code, burglar takes stuff)
  5. installation: setup back door or reverse connection (burglar fixes a window so they can get in later)
  6. command and control: cover your tracks, take over the machine (go in later to get more)
  7. actions: delete data, insert data, copy data for extortion, lock files for ransomware (get your stuff)

Unavailable Apple Wiki media: the exported data did not include file bd61e9af-650e-4fd5-adb7-fa0dba8df476.



Migrated from Apple Server Wiki. Original page ID: c3u5t4