Cybersecurity

What is cyber security?

Cybersecurity refers to the protection of computer systems, networks, data and programs from attacks aimed at stealing, manipulating or destroying them. It encompasses a variety of technologies, processes and practices that help to protect systems against threats from the internet, internal risks or physical attacks.

Why is cyber security important?

Cybersecurity is essential because digital infrastructure is the backbone of modern society and the economy. A successful cyber attack can paralyze a company’s operations, lead to data loss and cause significant financial damage. In addition, attacks on critical infrastructures such as energy supply, healthcare or finance can have far-reaching social consequences.

What types of cyberattacks are there?

The most common types of attack include:

• • Phishing: Deception using fake e-mails or websites to steal sensitive information.
  • Malware: Malicious software such as viruses, Trojans or worms that infect systems.
  • Ransomware: Encryption of data by attackers who demand a ransom for decryption.
  • DDoS (Distributed Denial of Service): Overloading of a server through mass requests in order to paralyze it.
  • Man-in-the-middle attacks: Interception and manipulation of communication between two parties.
  • Brute force attacks: Attempt to crack passwords or encryption codes by systematic trial and error.

How can I make myself safer online?

Important measures to increase personal and company-wide security include

• • Use strong passwords and change them regularly.
  • Activate two-factor authentication (2FA) to create an additional layer of security.
  • Carry out regular software updates to close security gaps.
  • Install antivirus and anti-malware programs and keep them up to date.
  • Be suspicious of unknown e-mails and suspicious links.

What is two-factor authentication and how does it work?

Two-factor authentication (2FA) requires a second authentication factor in addition to the password in order to grant access to an account. This second factor can be a one-time password (OTP), an SMS, a biometric verification (e.g. fingerprint) or a hardware token. This significantly increases security, as an attacker would not only need to know the password, but also the second factor.

How can I protect myself against phishing?

Recognize and avoid phishing emails by:

• • The sender addresses should be checked carefully (look out for typing errors and discrepancies).
  • links are not clicked directly, but URLs are entered manually in the browser.
  • Emails with an urgent tone or unexpected attachments are ignored.
  • A spam filter technology is implemented that automatically blocks suspicious messages.

What is a firewall and how does it work?

A firewall is a security mechanism that monitors and blocks or allows incoming and outgoing data traffic in a network based on defined security rules. It protects networks from unwanted access and malicious data packets by acting as a barrier between an internal trusted network and external threats. Modern firewalls can work at application level and analyze content in detail.

What is encryption and why is it important?

Encryption is the process of converting data into an unreadable code that can only be decrypted with a special key. It protects the confidentiality of information by ensuring that even if data is intercepted, it cannot be read without the appropriate key. Encryption is used in many areas, such as online banking, email communication and cloud storage.

How secure is cloud storage?

Cloud storage can be secure if appropriate security precautions are taken. This includes:

• • Data encryption both during transmission and at rest.
  • Secure authentication methods such as 2FA.
  • Check the cloud provider’s security certificates and policies. However, security also depends heavily on the company’s implemented policies and the selection of a trustworthy cloud provider.

What is ransomware and how can you protect yourself against it?

Ransomware is malware that encrypts a system’s data and then demands a ransom to enable decryption. Protective measures include:

• Create regular backups and ensure that they are not connected to the main network.
• Use updated security software.
• Sensitize employees to phishing and other social engineering attacks, which often serve as an entry point for ransomware.

How do I know if my computer has been hacked?

Signs of a hacked computer can include

• Unexpected slowdown of the system.
• Unknown programs or files on the computer.
• Pop-ups or prompts to install unexpected software.
• Unusual network traffic or high CPU load, even if no active programs are running. If this is suspected, all passwords should be changed immediately and the computer should be checked for malware using security software.

What should I do if I have been hacked?

In the event of a cyberattack, the following steps are essential:

• Immediately disconnect the device from the Internet to prevent further damage.
• Report security incidents and involve an incident response team.
• Use backups to restore affected data.
• Identify security gaps and rectify them immediately.
• In the event of serious attacks, a report to law enforcement authorities may be necessary.

How do I become a cyber security expert?

Getting started in cyber security requires a combination of technical knowledge, practical experience and certifications. Relevant certificates are:

• CompTIA Security+
• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH) Furthermore, knowledge in the areas of network security, cryptography and risk management should be acquired.

What tools do cyber security experts use?

Typical tools in cyber security are:

• Wireshark (network analysis)
• Nmap (network scans)
• Metasploit (penetration tests)
• Splunk (log and event management)
• Kali Linux (for penetration tests) These tools help to identify vulnerabilities and defend against cyber attacks.

Which laws protect my data online?

In the EU, the General Data Protection Regulation (GDPR ) is the most important law regulating the protection of personal data. Companies must ensure that they store and process data securely. There are also corresponding data protection laws in other countries, such as the California Consumer Privacy Act (CCPA) in the USA.

What are the consequences of a cyberattack for companies?

The consequences of a cyberattack can be devastating:

• Financial losses due to business interruptions, extortion payments or legal penalties.
• Damage to the company’s reputation, which can lead to a loss of trust among customers in the long term.
• Legal consequences, especially if sensitive data has been stolen and data protection laws have been breached. Preventive measures and a well-developed emergency plan are crucial to minimize the risk.

Zurück zur Übersicht des Glossars