Cybersecurity Background Knowledge: Terminologies, Attack Frameworks, and Security Life Cycle

Abstract

This chapter provides a foundational understanding of cybersecurity concepts, including terminologies and attack frameworks like the cyber kill chain and MITRE ATT&CK, as well as the cybersecurity life cycle. In this chapter, key terms regarding threats, vulnerabilities, security controls, and relevant emerging technologies associated with AI are clarified, enabling effective communication within the cybersecurity field. Examining attack frameworks, which encompass the sequential stages of the cyber kill chain and the tactical matrix of MITRE ATT&CK, provides valuable insight into adversary tactics. Furthermore, the cybersecurity life cycle emphasizes a systematic approach to cybersecurity management, emphasizing risk assessment, continuous monitoring, and adaptive security measures. The purpose of this chapter is to provide readers with the knowledge and understanding necessary to navigate the complex landscape of cybersecurity with a strategic and informed perspective, providing a solid foundation for further exploration.