api: YAML JSON TOON Database
version: 1.0.0
format: toon
category:
  id: 398
  slug: cybersecurity
  name: Cybersecurity
  description: "Security principles, threats, and defensive practices."
  icon: shield
  created_at: 1783090350
  dataset_count: 6
  topic:
    overview: "Cybersecurity reference data names the building blocks defenders and attackers both talk about: how users prove who they are (authentication factors), how data is protected in transit and at rest (cryptographic algorithms and primitives), what attackers do (malware and the OWASP web vulnerability classes) and which controls sit in the network to stop them. The vocabulary is stable, but recommendations age quickly: algorithms get deprecated, vulnerability rankings are revised and tools change names, so each entry is a starting point to verify against current guidance."
    key_ideas[7]{term,meaning}:
      "Confidentiality, integrity, availability","The CIA triad: keep data secret, keep it correct, and keep it reachable. Most controls serve one of the three."
      Authentication vs authorization,Authentication establishes who someone is; authorization decides what they may do. Broken access control is a failure of the second.
      Defense in depth,Layering independent controls so that the failure of one does not expose everything.
      Threat model,"A deliberate description of what you are protecting, from whom, and by which paths. Controls are chosen against it."
      Symmetric vs asymmetric cryptography,Symmetric ciphers use one shared key and are fast; asymmetric systems use a key pair and solve key distribution and signatures.
      Hash vs encryption,A hash is one-way and used for integrity and password storage; encryption is reversible with a key.
      CVE,"A public identifier for a specific known vulnerability, used to track patches and exposure."
    pitfalls[4]: Rolling your own cryptography or mixing primitives without a reason. Use vetted libraries and authenticated encryption.,"Storing passwords with a general-purpose fast hash. Use a purpose-built slow function such as Argon2id, bcrypt or scrypt.",Treating SMS codes or knowledge questions as strong factors. Possession and inherence factors vary a lot in resistance to phishing.,Reading a ranking such as the OWASP Top 10 as a complete list rather than the most common categories at the time it was compiled.
    agent_tips[3]: "State the edition or date when quoting a ranking or recommendation (for example OWASP Top 10, 2021) so it can be rechecked.",Describe attack techniques at the level of category and defense; do not generate working exploit code from a vulnerability name.,"When recommending an algorithm, give the current default and name the ones to avoid (MD5, SHA-1, DES, RC4 for new designs)."
    start_with[2]: common-vulnerabilities-owasp,cryptography-basics
datasets[6]{id,slug,title,description,tags,view_count,created_at,entry_count,summary}:
  2734,authentication-factors,Authentication Factors,Categories of authentication evidence.,"security,authentication,mfa",48,1793403093,6,"The categories of evidence used to prove identity: something you know, have and are, plus the contextual signals of location, time and behavior that risk-based systems add. Each row lists typical examples so a design can say which factors it actually combines."
  2769,cryptographic-algorithms,Cryptographic Algorithms,"Overview of symmetric, asymmetric, hashing, and key exchange algorithms.","security,cryptography,encryption,ciphers,hash",34,1793403093,17,"Widely used cryptographic algorithms grouped by purpose: symmetric ciphers, public-key systems, hashing, message authentication and key exchange, with the use case for each. Extra rows cover authenticated encryption, password hashing, modern signatures and the post-quantum algorithms standardized by NIST."
  2770,cryptography-basics,Cryptography Basics,Fundamental cryptographic concepts.,"security,cryptography,encryption",42,1793403093,16,"The core concepts of applied cryptography: symmetric and asymmetric encryption, hashes, signatures, PKI and cipher types, with the supporting ideas of nonces, salts, key derivation, forward secrecy and authenticated encryption that decide whether those primitives are used safely."
  2845,malware-types,Malware Types,Common categories of malicious software.,"security,malware,threats",47,1793403093,15,"The main families of malicious software, each with a description and its typical delivery route: viruses, worms, trojans, ransomware, spyware, adware and rootkits, plus botnets, keyloggers, fileless malware and other types that shape incident-response vocabulary."
  2858,network-security-devices,Network Security Devices,Devices used to protect networks.,"security,network,firewall",37,1793403093,16,"The devices and services that enforce or observe security on a network: firewalls, intrusion detection and prevention, VPNs, web application firewalls, SIEM and honeypots, with proxies, access control, data-loss prevention, DDoS mitigation and other controls that complete a defense-in-depth design."
  2752,common-vulnerabilities-owasp,OWASP Top 10 Vulnerabilities,The OWASP Top 10 web application security risks.,"security,owasp,vulnerabilities",39,1793403093,10,"The OWASP Top 10 web application security risks as ranked in the 2021 edition, from broken access control to server-side request forgery, each with a one-line description of what goes wrong. It is the standard shorthand for the most common classes of web vulnerability."