2.1 Define core terminology used in cyber security

As with any area of study or career, there is a lot of specialised terminology used in cyber security. We will review some of the core terminology;

Malicious Software (Malware)

Imagine your computer is a castle. Malicious software, or "malware" for short, is like a bunch of different sneaky invaders trying to get into the castle to steal treasure or cause trouble. These invaders have names like viruses, Trojans, worms, and ransomware, and they all have their own special ways of breaking in.

Cloud Computing

Cloud computing is like storing your toys in a friend's house instead of your own. You can play with them whenever you want over the internet, without having to bring them home. There are three ways to use your friend's house: just storing your toys there (IaaS), using their toys and storage (PaaS), or playing games they've set up for you (SaaS).

Software

Software is like the instructions that tell your toys (in this case, the computer) how to act and what to do. The most important set of instructions is the operating system, which makes sure that all parts of the computer play nicely together.

Domain

A domain is like a club where only certain members (like computers, printers, and other devices) can join and communicate with each other. It's like having a special pass to talk and share things within the club.

Exploit

An exploit is like finding a secret passage into a castle (computer) that nobody knows about. Bad guys use these secret passages to sneak in without being caught.

Breach

A breach happens when someone successfully sneaks into the castle using a secret passage and steals the treasure or causes trouble.

Firewall

A firewall is like the castle's guards checking everyone who wants to enter. If they don't like what they see or if someone is carrying something dangerous, they won't let them in. This helps keep the castle safe from invaders.

Encryption

Encryption is like writing a secret message that only you and your friend know how to read. If someone else finds the message, they won't understand it because they don't have the secret key to decode it.

Bring Your Own Device (BYOD)

BYOD is like being allowed to bring your own toys to school. There are rules about which toys you can bring and how you can use them, especially if you want to connect them to the school's Wi-Fi.

Denial of Service (DoS) and Distributed Denial of Service (DDoS) Attacks

Imagine if a bunch of people blocked the entrance to a store so no one else could get in. A DoS attack is like one person blocking the door, while a DDoS attack is like a whole crowd blocking it. This stops anyone from using the store until the crowd leaves.

Penetration Testing (Pen Testing)

Pen testing is like hiring a good knight to try and find secret passages into the castle (your computer or network) before the bad guys do. This way, you can close these passages up and keep your castle safe.