> For the complete documentation index, see [llms.txt](https://riteshs4hu.gitbook.io/infosec-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://riteshs4hu.gitbook.io/infosec-notes/information-security.md). # Information Security ### **What is Information Security?** Information Security (InfoSec) is the practice of protecting data from unauthorized access, disclosure, modification, or destruction. It involves implementing policies, processes, and controls to ensure the confidentiality, integrity, and availability (CIA Triad) of information. *** ### **What is Cybersecurity?** Cybersecurity refers to protecting systems, networks, and digital data from cyber threats like hacking, malware, and unauthorized access. It encompasses various domains such as network security, application security, cloud security, and endpoint security. *** ### **What is Hacking?** Hacking is the act of exploiting vulnerabilities in a system, application, or network to gain unauthorized access or control. Hackers use various tools and techniques to identify and exploit weaknesses. *** ### **What is Ethical Hacking?** Ethical Hacking is legally authorized hacking conducted by security professionals to identify vulnerabilities in a system before malicious hackers exploit them. Ethical hackers follow the same methodologies as black-hat hackers but use them for defensive purposes. *** ### **What is a Threat?** A **threat** is any potential danger that can exploit a vulnerability and cause harm to a system, organization, or individual. Threats can be intentional (e.g., hackers) or unintentional (e.g., natural disasters, system failures). *** ### **What is Risk?** Risk is the potential impact of a threat exploiting a vulnerability. It is calculated as:\ **Risk = Threat × Vulnerability × Impact**\ Organizations use risk assessment to prioritize security measures. *** ### **What is a Vulnerability?** A vulnerability is a weakness in a system, application, or network that can be exploited by an attacker. Examples include misconfigured servers, outdated software, weak passwords, and unpatched software. *** ### **What is an Exploit?** An **exploit** is a tool or technique used to take advantage of a vulnerability. Exploits can be scripts, malware, or manual techniques that allow attackers to gain control over a system. *** ### **What is a Payload?** A payload is the malicious code or action delivered by an exploit. It can be designed to steal data, create backdoors, or execute commands on a compromised system. *** ### **What is Vulnerability Research?** Vulnerability research is the process of discovering and analyzing security weaknesses in software, hardware, or networks. Security researchers and ethical hackers perform vulnerability research to improve security. *** ### **What is Vulnerability Assessment?** Vulnerability Assessment is a systematic process of identifying and evaluating security weaknesses in systems, applications, and networks. It involves using automated tools and manual techniques to detect vulnerabilities. *** ### **What is Vulnerability Management?** Vulnerability Management is a continuous process that includes identifying, prioritizing, remediating, and monitoring vulnerabilities to reduce security risks over time. *** ### **What is Penetration Testing?** Penetration Testing (Pen Test) is a simulated cyberattack performed to assess the security of a system. Ethical hackers attempt to exploit vulnerabilities to evaluate the effectiveness of security controls. #### **Categories of Penetration Testing:** 1. **Black Box Testing:** The tester has no prior knowledge of the system. 2. **Gray Box Testing:** The tester has limited knowledge, such as user credentials or network details. 3. **White Box Testing:** The tester has full knowledge of the system, including source code and architecture. *** ### **What is VAPT?** Vulnerability Assessment and Penetration Testing (VAPT) is a security testing process that combines: * **Vulnerability Assessment (VA):** Identifies security weaknesses. * **Penetration Testing (PT):** Actively exploits weaknesses to determine their impact. *** ### **What are the Hacking Phases?** Hacking involves five main phases: 1. **Reconnaissance:** Gathering information about the target. 2. **Scanning:** Identifying live systems, open ports, and vulnerabilities. 3. **Gaining Access:** Exploiting vulnerabilities to compromise the system. 4. **Maintaining Access:** Installing backdoors or persistence mechanisms. 5. **Covering Tracks:** Clearing logs and removing traces of the attack. *** ### **What is the CIA Triad?** The **CIA Triad** is a fundamental security model consisting of: 1. **Confidentiality:** Ensuring data is accessible only to authorized users. 2. **Integrity:** Ensuring data is accurate and has not been altered. 3. **Availability:** Ensuring data is accessible when needed. *** ### **What is the Penetration Testing Methodology?** Penetration Testing follows a structured approach, including: 1. **Planning & Reconnaissance** – Gathering information about the target. 2. **Scanning** – Identifying live hosts, open ports, and services. 3. **Exploitation** – Attempting to exploit vulnerabilities. 4. **Post-Exploitation** – Maintaining access and gathering further intelligence. 5. **Reporting** – Documenting findings, risks, and recommendations. *** ### **What is Defence in Depth?** Defence in Depth is a layered security approach that uses multiple defensive measures to protect systems. It includes firewalls, intrusion detection systems (IDS), antivirus, encryption, access controls, and regular security audits. *** ### **What is a Security Team?** Security teams are categorized into three main groups: 1. **Red Team:** Offensive security professionals who simulate real-world attacks. 2. **Blue Team:** Defensive security experts who detect, prevent, and respond to attacks. 3. **Purple Team:** A hybrid team that combines Red and Blue team efforts for continuous improvement. *** ### **What are the Types of Phishing?** Phishing is a social engineering attack designed to trick users into revealing sensitive information. Types include: 1. **Email Phishing:** Mass emails sent to trick users into clicking malicious links. 2. **Spear Phishing:** A targeted phishing attack aimed at a specific person. 3. **Vishing (Voice Phishing):** Phishing attempts carried out over phone calls. 4. **Whaling:** A phishing attack targeting high-profile individuals like CEOs. *** ### Reference {% embed url="" %}