Cyber Security and IT Policies [ Note of RBB (Rastriya Banijya Bank) ] | Note of Rastriya Banijya Bank

 

Cyber

• Cyber refers to anything related to computers, digital devices, networks, and the internet.
• It includes online communication, digital information, and computer-based technologies.
• The term "cyber" is commonly used in areas such as cyberspace, cybercrime, cybersecurity, and cyber attacks.
• Cyber technologies enable people to connect, share information, and perform various online activities.
• Examples of cyber-related fields include Cyber Security, Cyber Law, Cyber Crime, and Cyber Forensics..

Security

• Security is the practice of protecting people, systems, information, and assets from threats, damage, unauthorized access, or misuse.
• It aims to ensure safety, privacy, and the proper functioning of resources.
• Security involves identifying risks, preventing attacks, and responding to incidents.
• It uses policies, procedures, technologies, and physical or digital safeguards to reduce risks.
• Security is important for protecting individuals, organizations, and valuable information from harm.

Cybersecurity

• Cybersecurity is the practice of protecting computers, networks, applications, and data from unauthorized access, cyberattacks, and damage.
• It helps maintain the confidentiality, integrity, and availability of information.
• Cybersecurity protects systems from threats such as malware, viruses, phishing, ransomware, and hacking.
• It uses technologies, processes, and security practices to prevent and manage cyber risks.
• It is important for protecting personal information, business data, and online services.

Common Cybersecurity Measures

·         Firewalls: Monitor and control network traffic to prevent unauthorized access.

·         Encryption: Converts data into a secure format to protect it from unauthorized users.

·         Antivirus Software: Detects and removes malicious programs from systems.

·         Access Control: Restricts access to data and resources based on user permissions.

·         Strong Authentication: Uses passwords, multi-factor authentication, and verification methods to protect accounts.

·         Regular Updates: Keeps operating systems and applications secure by fixing vulnerabilities.

Cybersecurity Threats

• Cybersecurity threats are harmful activities or attacks that target computers, networks, systems, and digital data.
• These threats are designed to steal information, damage systems, disrupt services, or gain unauthorized access.
• Cybersecurity threats can come from hackers, cybercriminals, malicious software, or insider attacks.
• They can cause data breaches, financial losses, identity theft, and loss of privacy.
• Common cybersecurity threats include Malware, Phishing, Ransomware, Viruses, Worms, Trojan Horses, Spyware, Denial-of-Service (DoS) attacks, and Password Attacks

Common Cybersecurity Threats

1. Malware

·         Malware is malicious software designed to damage, disrupt, or gain unauthorized access to a computer system.

·         It can steal data, delete files, or slow down system performance.

·         Examples include viruses, worms, ransomware, spyware, and Trojan horses.

2. Phishing

·         Phishing is a cyber attack that uses fake emails, messages, or websites to trick users into revealing sensitive information such as passwords or bank details.

·         It is one of the most common forms of online fraud.

3. Ransomware

·         Ransomware is a type of malware that encrypts a victim's files and demands a ransom payment to restore access.

·         It can cause data loss and financial damage if backups are not available.

4. Viruses

·         A virus is a type of malware that attaches itself to files or programs and spreads when the infected file is opened.

·         It can damage files, corrupt data, and affect system performance.

5. Worms

·         A worm is a self-replicating malware that spreads automatically across computers and networks without requiring user action.

·         It can consume network resources and spread rapidly.

6. Trojan Horse

·         A Trojan Horse is malware disguised as legitimate software to trick users into installing it.

·         Once installed, it can steal data, create backdoors, or damage the system.

7. Spyware

·         Spyware is malicious software that secretly monitors user activities and collects personal information without the user's knowledge.

·         It can capture passwords, browsing history, and other sensitive data.

8. Denial-of-Service (DoS) Attack

·         A Denial-of-Service (DoS) attack is a cyber attack that floods a server or network with excessive traffic, making it unavailable to legitimate users.

·         Its goal is to disrupt normal services.

9. Password Attacks

·         Password attacks are attempts by cybercriminals to steal, guess, or crack user passwords to gain unauthorized access to accounts or systems.

·         Common methods include brute force attacks, dictionary attacks, and credential stuffing.

 

Access Control Mechanisms

• Access control mechanisms are security methods used to regulate who can access computer systems, networks, and data.
• They ensure that only authorized users can access specific resources.
• Access control helps protect sensitive information from unauthorized use or modification.
• It is based on identifying users, verifying their identity, and assigning permissions.
• Common access control mechanisms include authentication, authorization, and auditing.

Types of Access Control Mechanisms

1. Authentication

• Authentication is the process of verifying the identity of a user or device.
• It ensures that only valid users can access a system.
• Common methods include passwords, biometric verification, security tokens, and multi-factor authentication.

2. Authorization

• Authorization determines what actions an authenticated user is allowed to perform.
• It controls access to files, applications, and system resources.
• Permissions are assigned based on user roles and responsibilities.

3. Role-Based Access Control (RBAC)

• RBAC provides access based on a user's role within an organization.
• Users receive permissions according to their job responsibilities.
• It simplifies access management in large organizations.

4. Mandatory Access Control (MAC)

• MAC is a strict access control method where permissions are defined by system administrators.
• Users cannot change access permissions.
• It is commonly used in high-security environments.

5. Discretionary Access Control (DAC)

• DAC allows resource owners to decide who can access their data.
• Users can grant or remove permissions for their resources.
• It provides flexibility but may have lower security compared to MAC.

6. Auditing and Monitoring

• Auditing records user activities and access attempts.
• It helps detect unauthorized access and security violations.
• It supports security analysis and compliance management.

 

Threats

• Threats are potential dangers or harmful events that can exploit weaknesses in a computer system, network, or data.
• They are intended to steal information, damage systems, disrupt services, or gain unauthorized access.
• Threats can come from hackers, malware, natural disasters, human errors, or insider attacks.
• Identifying and preventing threats is essential for maintaining the confidentiality, integrity, and availability of information.
• Common types of threats include Malware, Phishing, Ransomware, Viruses, Worms, Trojan Horses, Spyware, Denial-of-Service (DoS) attacks, Password Attacks, and Insider Threats.

Vulnerabilities

• Vulnerabilities are weaknesses or flaws in a computer system, network, software, or security process that can be exploited by attackers.
• They make systems more vulnerable to cyber attacks, unauthorized access, and data breaches.
• Vulnerabilities may result from software bugs, weak passwords, outdated systems, or improper security configurations.
• Identifying and fixing vulnerabilities helps improve system security and reduces the risk of cyber threats.
• Common examples of vulnerabilities include Weak Passwords, Unpatched Software, Misconfigured Systems, Outdated Software, Open Network Ports, and Lack of Security Updates.

Security Attacks

• Security attacks are deliberate attempts to gain unauthorized access, steal data, or disrupt computer systems.
• They can target networks, applications, devices, and users.
• Security attacks can affect data confidentiality, integrity, and availability.
• Security attacks are mainly classified into passive attacks and active attacks.

Types of Security Attacks

1. Passive Attack

• A passive attack involves monitoring or collecting information without changing the data.
• The attacker tries to obtain confidential information secretly.
• Examples include eavesdropping and traffic analysis.

2. Active Attack

• An active attack involves modifying, damaging, or disrupting systems and data.
• The attacker attempts to affect normal operations.
• Examples include data modification, denial-of-service attacks, and malware attacks.

Common Security Attacks

• Phishing Attack: Tricks users into revealing sensitive information through fake emails or websites.
• Denial-of-Service (DoS) Attack: Overloads a system or network to make services unavailable.
• Man-in-the-Middle (MITM) Attack: An attacker secretly intercepts communication between two parties.
• Password Attack: Attempts to steal or guess user passwords.
• SQL Injection: Exploits weaknesses in database applications to access or modify data.
• Social Engineering Attack: Manipulates users into providing confidential information.

 

Authentication

• Authentication is the process of verifying the identity of a user, device, or system before allowing access.
• It ensures that only authorized users can enter a system or access resources.
• Authentication is usually performed using credentials such as usernames, passwords, biometrics, or security tokens.
• It protects systems from unauthorized access and identity theft.
• Common authentication methods include password authentication, biometric authentication, and multi-factor authentication (MFA).

Authorization

• Authorization is the process of determining what resources and actions an authenticated user is allowed to access.
• It defines user permissions and controls access to files, applications, and system resources.
• Authorization is performed after authentication.
• It helps prevent unauthorized use of sensitive information.
• Examples include allowing an administrator to modify system settings while a normal user can only view data.

Password Management

• Password management is the process of creating, storing, and maintaining secure passwords.
• It helps protect user accounts and sensitive information from unauthorized access.
• Strong passwords should contain a combination of letters, numbers, and special characters.
• Users should avoid using the same password for multiple accounts.
• Password managers can securely store and manage multiple passwords.
• Regular password updates and multi-factor authentication improve account security.
• Users should avoid sharing passwords and should keep them confidential.

 

Common Security Threats

1. Social Engineering

• Social engineering is a security threat that uses psychological manipulation to trick users into revealing confidential information.
• Attackers target human behavior rather than directly attacking computer systems.
• It is commonly used to steal passwords, financial details, or sensitive data.
• Social engineering attacks often involve fake messages, calls, or websites.

2. Malware

• Malware (Malicious Software) is a harmful program designed to damage systems, steal information, or gain unauthorized access.
• It can affect computers, networks, and mobile devices.
• Malware can spread through infected files, downloads, emails, or external devices.

Common types of malware include:

• Virus: Attaches itself to files and spreads when the infected file is executed.
• Worm: Self-replicates and spreads automatically through networks.
• Trojan Horse: Disguises itself as legitimate software to trick users.
• Spyware: Secretly monitors user activities and collects information.
• Ransomware: Encrypts data and demands payment to restore access.

3. Denial of Service (DoS)

• Denial of Service (DoS) is an attack that makes a system, website, or network unavailable to users.
• It works by sending a large amount of traffic or requests to overload the target system.
• It reduces performance or completely stops normal services.
• DoS attacks usually originate from a single attacking source.

4. Distributed Denial of Service (DDoS)

• Distributed Denial of Service (DDoS) is an advanced form of DoS attack.
• It uses multiple compromised devices to attack a single target at the same time.
• It creates large amounts of traffic that overwhelm servers and networks.
• DDoS attacks are difficult to prevent because requests come from many different sources.

5. Phishing

• Phishing is a social engineering attack where attackers use fake emails, messages, or websites to steal sensitive information.
• It attempts to trick users into revealing usernames, passwords, banking details, or other personal information.
• Phishing messages often appear to come from trusted organizations or individuals.

Types of Phishing

• Email Phishing: Uses fake emails to steal user information.
• Spear Phishing: Targets a specific person or organization with personalized messages.
• Whaling: A type of spear phishing that targets high-level executives or important individuals.
• Smishing: Uses fake SMS or text messages to trick users.
• Vishing: Uses phone calls or voice messages to obtain sensitive information.
• Pharming: Redirects users from legitimate websites to fake websites to steal information.