Everything sent over the Internet can pass through many devices you do not control. Cybersecurity is about protecting information and systems from misuse. This lesson is defensive: how threats work in general and how to protect yourself.

Common threats

  • Phishing: a fake email, text, or site that tricks you into giving up passwords or personal data. Warning signs include urgent language, unexpected attachments, and mismatched web addresses.
  • Malware: harmful software such as viruses, ransomware, and spyware. It often arrives through untrusted downloads or attachments.
  • Weak or reused passwords: if one site leaks a password, attackers try it on other accounts.
  • Unprotected networks: data sent over open Wi-Fi without encryption can be read by others.
  • Denial of service (DoS/DDoS): flooding a service with traffic so real users cannot reach it.

Many attacks succeed by fooling people (social engineering) rather than breaking technology, so awareness is a real defense.

Protecting yourself and your data

  • Use long, unique passwords, ideally from a password manager.
  • Turn on multi-factor authentication (MFA), which requires something you know (password) plus something you have (phone code or security key).
  • Keep software updated, since updates patch known flaws.
  • Install software only from trusted sources, and run antivirus protection.
  • Check for HTTPS before entering sensitive data, and be careful with links.

Encryption

Encryption scrambles data so only someone with the right key can read it. Decryption reverses it.

  • Symmetric encryption: the same key encrypts and decrypts. It is fast, but both parties must share the key safely.
  • Public key (asymmetric) encryption: each person has a public key anyone can use to encrypt a message for them, and a private key only they hold to decrypt it. This solves the problem of sharing a secret key over an open network, and it underlies HTTPS.

A certificate authority vouches that a public key really belongs to a given website.

A simple historical example, the Caesar cipher, shifts each letter by a fixed amount. It is easy to break, which shows why modern encryption relies on mathematics that is practical to do but extremely hard to reverse without the key.

Defenders at work

Organizations use firewalls to filter network traffic, monitor logs for unusual activity, back up data so ransomware cannot hold it hostage, and train people to spot scams. Security is layered: no single tool is enough.

Check your understanding

1. What is phishing?

  • Encrypting a file
  • Tricking people into revealing sensitive information
  • Speeding up a network
  • Backing up data

Answer: Tricking people into revealing sensitive information. It relies on deception, often through fake messages.

2. What does multi-factor authentication add?

  • A second, different proof of identity
  • Faster Wi-Fi
  • A longer URL
  • More storage

Answer: A second, different proof of identity. Even a stolen password alone is not enough.

3. In public key encryption, which key do you share openly?

  • The private key
  • The public key
  • Both
  • Neither

Answer: The public key. Others use it to encrypt messages that only your private key can decrypt.

4. Why do software updates improve security?

  • They add advertisements
  • They fix known vulnerabilities
  • They delete passwords
  • They slow down attackers’ computers

Answer: They fix known vulnerabilities. Unpatched flaws are common ways in.

PreviousNext