Cybersecurity

Confidentiality (only authorised access), Integrity (data is accurate and unaltered) and Availability (systems work when needed) — the core goals of security.

Encryption is reversible with a key and protects confidentiality. Hashing is one-way, producing a fixed-length digest used to verify integrity or store passwords (with salt).

Inserting malicious SQL into input fields to manipulate a database. Prevent it with parameterised queries, input validation, least-privilege DB accounts and an ORM.

DNS resolves the domain to an IP, the browser opens a TCP connection, performs a TLS handshake for HTTPS, sends an HTTP request and renders the response.

An alert that flags benign activity as malicious. Too many waste analyst time, so detections are tuned to balance false positives and missed attacks.

Preparation, detection and analysis, containment, eradication, recovery, and post-incident lessons learned (NIST).

Users and systems get only the minimum access needed to do their job, limiting damage if an account is compromised.

Symmetric uses one shared key (fast, e.g. AES). Asymmetric uses a public/private key pair (e.g. RSA, ECC) for key exchange and signatures; TLS uses both.

A knowledge base of real attacker tactics and techniques, used to map detections, find coverage gaps and describe attacks consistently.

HTTPS, strong password hashing (bcrypt/Argon2), rate limiting and lockout, MFA, secure session cookies, CSRF protection and logging of failed attempts.