Old Activity Sheet

SESSION - INTRODUCTION

what is cyber security? Give your definition with the understanding you got after attending this session and doing a little research on the Internet. PLEASE DO NOT COPY FROM THE PRESENTATION..
- Cybersecurity is the practice of protecting the entire networks, systems, computers, and data from unauthorized access by hackers and other cyber threats. It involves implementing policies, protocols, and technologies to ensure the confidentiality, integrity, and availability of information. Cyber Security is maintained by humans through planning, monitoring, and responding to attacks to safeguards personal, business, and national digital assets.
Why do you think we have to concern about cyber security?
- We have to be concerned because almost all of our personal, financial, and business activities are online now. Basically, a single cyber attack can cause huge financial loss and loss of trust.
List 5 major attacks reported in Sri Lanka and 5 in any other countries
- 2023, Lanka Hospitals Data Breach - Patient data was leaked online.
- 2022, Multiple Government Websites Defaces - Serveral gov.lk sites hacked by Hacktivist groups.
- 2021, Bank of Ceylon Phishing Scam - Fake BOS websites to steal customer login details.
- 2020, Mobitel Data Leak - Customer database exposed online
- 2019, Central Bank SWIFT Fraud - Attempted cyber fraud targeting financial transactions
- 2021, Colonial Pipeline Ransomware - USA - gas pipeline shut down, paid $4.4M ransom.
- 2017, WannaCry Ransomware - Global - Hit 300,000 + computers in 150 counties including NHS UK
- 2013, Yahoo Data Breach - USA - 3 billion user accounts compromised
- 2020, SolarWinds Supply Chain Attack - USA - Hackers accessed US government agencies
- 2022, Uber Data Breach - Global - Hacker accessed internal systems and user data
What are the areas concerned for protection when we speak of cyber security
- Network Security: Protecting network infrastructure, firewalls, routers
- Application Security: Securing software, websites, and apps from vulnerabilities
- Information / Data Security: Protecting data, through encryption, access control, backup
- Cloud Security. Endpoint Security
Give your understanding about cryptography, cryptology and crypt analysis. Use your own words for explanation
- Cryptography: The art of creating codes to protect information. It’s like locking your message in box so only the right person with the key can read it. Ex: Encrypting data, using HTTPS.
- Cryptology: The fall study of codes. It includes both making codes and breaking codes. so cryptography + crypt analysis = cryptology
- Crypt analysis: The art of breaking codes without the key. It’s what hackers or security experts do to test if an encryption is strong

Cybersecurity Information Asset List

Information Type	Location (device / online service)	Value (High / Medium / Low)	Relevant Threats	Defense Mechanism
Private Databases and Core Servers	On-premise servers / Private Cloud	High	Ransomware Insider Threat	Firewall, Access Control, Encryption, Regular Backups
Firewall & Network Infrastructure Config	Network Devices / Cloud console	High	Misconfiguration, Unauthorized Access, APT	Change Management Network Segmentation, Logging & Monitoring
Shareholder Data + Financial Records	Accounting Software Secure Cloud Storage	High	Data Theft, Identify Theft	Encryption, Audit Logs Role-based Access
Company Apps & Web Portals	Web Server / Cloud Hosting	Medium	Brute force, Defacement Attack	Web Application Firewall, Password Complexity Policy, Regular Patching & Updates, Input Validation
Customer Data - (View / Edit)	Database Server	Medium	Data Breach, Phishing	Data Encryption, Access Controls, DLP Regular Backups + Audit Logs, Security Awareness Training, Email filtering, Anti-Phishing Policies, MFA
Inventory & Supply chain systems	ERP System / Cloud	Medium	Supply Chain Attack, Data Manipulation	Vendor Risk, Assessment, Access Control, Integrity Checks
Email & Internal Communication	Email Server / MS365, Gmail	Low	Phishing, Malware Attachments	Spam Filters, Security Awareness Training, Attachment Sandboxing, Antivirus Scanning
Agreement & Policies	Document Server / SharePoint / Google Drive / DMS	High	Data Leakage, Unauthorized Modification, Insider Threat, Ransomware	Access Control, Encryption, Digital Signatures + Version Control, Audit Logs, Regular Backups, DLP
Centralized System	Main Server / Data Center	High	Single Point of Failure, Ransomware	Disaster Recovery Plan, Network Firewall, Patch Management, Redundancy

ACTIVITY - SESSION 4

Write down 3 threats towards each security pillar (confidentiality, integrity and availability). Then write down the countermeasures that one can take to avoid those threats towards those pillars to ensure information security.

Threats? → Confidentiality → Countermeasures

Threats? → Integrity → Countermeasures

Threats? → Availability→ Countermeasures

Item	Security Pillar	Threats	Countermeasures	Justification
1 WhatsApp messages	Confidentiality	Man in the middle attack	Encryption	When data is encrypted even when a third party get access to our data, it cannot be read by them
2 Online banking login	Confidentiality	Shoulder Surfing	Privacy screen filters	Blocks bystanders from seeing typed passwords
3 Company Instagram account	Confidentiality	Sessions Hijack	Session timeouts & MFA	Terminates stolen login tokens automatically
4 Monthly Excel Reports	Integrity	Key Logger	Anti-Malware Software	Stops Malware from recording data-entry typing
5 Website contact Forms	Integrity	Spoofing	CAPTCHA Verification	Blocks bots from sending fake form inputs
6 Customer database	Integrity	Virus	Anti Virus Scanning	Prevents malicious code from corrupting Files
7 Office Wi-Fi network	Availability	Worm	Network Segmentation	Stops self-Replicating malware from spreading
8 Employee Laptops	Availability	Trojan	End Points EDR Software	Blocks hidden malware from locking systems
9 Main Office Server	Availability	Ransomware	Offline backups	Restores data quickly without paying Ransoms