Cyber Security Presentation
                     CYBER 
SEUndeCrstandingU the RisksR and BesIt PrTacticesY
Presented by - Aniket Sharma
INTRODUC
T• PrIotOection Nof systems, networks, and data from 
digital attacks
• Ensures confidentiality, integrity, and 
availability
• Involves technical and human strategies
• Defends against malware, phishing, data 
breaches  and more
• Critical in a hyper-connected digital world
  IDENTITY AND     
CRYPTOGRAPHY
• IAM ensures only authorized users access systems
• Identity Federation enables single sign-on across 
systems
• Cryptography: encrypts data to prevent unauthorized 
access
• Hashing ensures data integrity
• Digital Signatures validate authenticity of messages
SECURITY 
• GDPR: protects EU citizensG’ data OprivacyVERNANCE
• HIPAA: safeguards health information (US)
• PCI-DSS: secures payment card data
       Intellectual Property laws protect digital assets
• Organizations must comply to avoid legal 
penalties
NETWORK 
LAYERS
Overview
 • OSI vs TCP/IP: conceptual frameworks for data flow
• Layers: Application, Transport, Network, 
Link
• DNS: Translates domain names to IP 
addresses
• NAT: Enables multiple devices to share one 
IP
SECURITY
 PROTOCOLS
• SSL/TLS: Encrypts communication over the web
• IPSec: Secures IP communication by authenticating 
        packets
• VPNs: Create secure tunnels over public networks
• SSH: Secure remote access to servers
FIREWALLS &
PROTECTION
• Firewalls control traffic between networks.
• Can be hardware or software-based.
• Enforce security policies via rules
• First line of defense against network threats
COMMON 
HACKER 
• PasswordA ATttackTs: ABruteC-forceK, diSctionary 
attacks
• DoS/DDoS: Overload systems, causing 
downtime
• DNS Attacks: Cache poisoning, spoofing
• Man In The Middle (MITM) Attacks: 
       Intercept communication secretly
 NETWORK & 
SOCIAL  
 ENGINEERING
• Network Attacks: IP spoofing, packet sniffing
• Social Engineering: Tricking humans to reveal data
INJECTION & 
SCRIPT-BASED 
ATTACKS
• SQL Injection: Inject malicious SQL into input 
fields
• Blind SQLi: No direct output, but Database  
      still manipulated
• XSS: Inject scripts into webpages to steal data
   Prevention - Prevent via input validation and
 prepared  statements
MITIGATION & 
VULNERABILITY 
MANAGEMENT
• Use  Web Application Firewalls
• Apply least privilege access
• Regular vulnerability scanning
• Patch known weaknesses promptly
TYPES OF 
MALWARE
(VIRUSES , 
• VWirus: AtOtachesR to fileMs; spreaSds w heAn opeNned D 
• Worm: Self-replicates over networks
• Trojan: TDisguRised aOs legitJimAate soNftwarSe )
 These causes system damage or opens backdoors
OTHER MALWARE & 
PROTECTION
• Spyware/Adware: Secretly collect user data
• Ransomware: Locks files until payment
• Rootkits/Logic Bombs: Hide presence, trigger damage
• Anti-Malware: Detects and removes threats
CYBER KILL 
CHAIN
• Kill Chain Phases: Recon → Weaponization → 
Delivery
• Progresses through Exploitation → C2 → Action
• Helps detect and stop attacks early
• Common model in enterprise cybersecurity
 DETECTION & 
PREVENTION      
SYSTEMS
• IDS: Monitors for suspicious activity
• IPS: Actively blocks threats in real-time
• SNORT: Popular open-source IDPS tool
  Crucial for detecting network breaches
PACKET 
ANALYSIS & 
• NeWtwork foIreRnsics EtraceSs digiHtal evidAenceRK
• Packet analysis reveals malicious activity
• Wireshark: Captures & analyzes network traffic
  Used in breach investigations
WIRESHARK 
FILTERING 
TECHNIQUES
• Display filters: Show specific packets (e.g., HTTP, DNS)
• Capture filters: Select what packets to record
ACCESS CONTROL 
MODELS
• Control who can access what and how
• Discretionary Access Control -Owner decides access 
(flexible, risky)
• Mandatory Access Control - Strict rules set by 
administrator
• Role Based Access Control - Role-based (most 
common in organizations)
ATTRIBUTE BASED 
ACCESS CONTROL & 
MODEL SELECTION
• Attribute Based Access Control: Uses attributes (role, 
location, time)
• More flexible & scalable
• Select model based on sensitivity & need
GENERATIVE AI FOR 
CYBER SECURITY
• Uses AI to detect complex patterns
• Assists in threat modeling and prediction
• Speeds up malware analysis
• Helps identify ransomware behaviors early
CONCLUSION
• Cybersecurity is essential in modern IT infrastructure
• Involves layered defense: people, processes, tech
• Understanding attacks helps build better defenses
• Continuous learning and adaptation are key
THANK YOU