Welcome to your second lesson! In our previous session, we established a crucial foundation by exploring how devices connect and communicate across networks using IP addresses, MAC addresses, and routers. We followed the journey of a data packet from a local computer to the wider internet.
Now that we understand the mechanics of connectivity, we shift our focus to a fundamental question in your field of interest: How do we protect the information that travels across these networks? This lesson introduces the CIA triad, a cornerstone concept in cybersecurity. We will define its three components—Confidentiality, Integrity, and Availability—and, most importantly, see how they apply directly in a network context. This framework will provide the "why" behind many of the security practices we'll discuss later.
The Three Pillars of Information Security
At the heart of information security are three core principles. They form a model known as the CIA triad, which helps professionals analyze threats, apply controls, and create security policies. It's important to note that this has no connection to the US intelligence agency; in cybersecurity, CIA stands for Confidentiality, Integrity, and Availability.
These three principles are often in a delicate balance. Strengthening one can sometimes weaken another, and a cybersecurity professional's job is to manage these trade-offs based on the specific needs of an organization and its data.
Let's begin with a short video from Professor Messer, a well-respected name in IT training, who provides a concise overview of the triad.
The CIA Triad - CompTIA Security+ SY0-701 - 1.2
This video, "The CIA Triad," will give you a quick, clear introduction to all three principles.
Please watch the first part of the video, from the beginning until 1:23. This segment introduces the triad and gives a brief definition for each component.
Now that you have a high-level overview, we will explore each component in detail, complete with examples of how they function in the real world of networking.
1. Confidentiality: Keeping Secrets Secret
Confidentiality is perhaps the most intuitive of the three principles. It's about ensuring that information is not disclosed to unauthorized individuals, systems, or processes. In essence, it's about privacy and secrecy. When you send a private message or enter a password online, you expect confidentiality.
To achieve this, we use several techniques. Let's return to Professor Messer's video to see some common methods.
The CIA Triad - CompTIA Security+ SY0-701 - 1.2
This segment of the video focuses specifically on Confidentiality.
Watch the portion from 1:23 to 2:49. Pay close attention to the examples given, such as encryption and access controls.
As the video explained, two primary methods for ensuring confidentiality are:
- Encryption: Scrambling data so that it can only be read by someone with the correct "key."
- Access Controls: Using mechanisms like usernames, passwords, and file permissions to restrict who can see or interact with data.
For a deeper dive into these concepts and what happens when confidentiality is breached, the following reading provides excellent examples.
What is the CIA triad? A principled framework for defining infosec ...
This article from CSO Online explains confidentiality with clear examples and best practices.
Please read the section titled CIA triad confidentiality explained. Focus on the different ways confidentiality is enforced, both technically (like cryptography) and non-technically.
Network Context Example: HTTPS
A perfect example of confidentiality in a network is the use of HTTPS (Hypertext Transfer Protocol Secure). When you visit a website using HTTPS (indicated by the padlock icon in your browser's address bar), the connection between your browser and the web server is encrypted. This protects the confidentiality of the data you exchange. If an attacker on the same Wi-Fi network were to intercept your data packets, they would see only scrambled, unreadable text, not your password or credit card number.
2. Integrity: Ensuring Trustworthy Data
Integrity is about maintaining the consistency, accuracy, and trustworthiness of data over its entire lifecycle. It ensures that data has not been changed, altered, or destroyed in an unauthorized manner. You need to be able to trust that the information you are receiving is the same information that was sent.
Let's see how we can verify that data hasn't been tampered with.
The CIA Triad - CompTIA Security+ SY0-701 - 1.2
This part of the video explains the principle of Integrity.
Watch the clip from 2:49 to 4:12. Notice the explanation of hashing as a way to verify integrity.
The video introduces hashing as a primary tool for integrity. A hash is a unique, fixed-length string of characters generated from a piece of data. If even a single bit of the data changes, the hash will change completely. This makes it an excellent "fingerprint" for data.
The following reading provides more context on integrity, including what a breach of integrity looks like.
What is the CIA triad? A principled framework for defining infosec ...
This section of the CSO Online article explores the methods used to maintain and detect breaches of data integrity.
Please read the section titled CIA triad integrity explained. Pay attention to the examples of integrity breaches, such as a website defacement attack.
Network Context Example: File Download Verification
When you download a large file, such as a software program or an operating system update from the internet, you are trusting that the file is authentic and hasn't been modified. To ensure integrity, many websites provide a hash value (often called a checksum) for the file.
After downloading the file, you can use a utility on your own computer to calculate its hash. If the hash you generate matches the one provided on the website, you can be confident in the file's integrity. It means the file wasn't corrupted during the transfer and, more importantly, it hasn't been maliciously altered to include malware.
3. Availability: Access When You Need It
Availability ensures that systems and data are accessible and usable upon demand by an authorized user. It's not enough for data to be secret and correct if you can't get to it when you need it. This principle focuses on keeping systems running and accessible.
Finally, let's look at how we ensure systems remain available.
The CIA Triad - CompTIA Security+ SY0-701 - 1.2
This final segment covers the principle of Availability.
Watch from 4:12 to 5:03. The video explains availability in terms of system design (fault tolerance) and maintenance (patching).
Ensuring availability involves protecting against hardware failures, software bugs, and network outages. It also involves defending against attacks designed specifically to make a service unavailable.
This last reading introduces the classic attack against availability.
What is the CIA triad? A principled framework for defining infosec ...
This part of the CSO Online article discusses how availability is maintained and what can compromise it.
Please read the section titled CIA triad availability explained. Focus on the classic example of a loss of availability: the Denial-of-Service attack.
Network Context Example: Denial-of-Service (DoS) Attack
A Denial-of-Service (DoS) attack is a direct assault on availability. In this scenario, an attacker attempts to make a network resource—such as a website, an online game server, or a company's entire network—unavailable to its intended users. This is often done by flooding the target with an overwhelming amount of traffic. The server wastes all its resources trying to handle the flood of bogus requests, leaving it unable to respond to legitimate users. This doesn't steal or alter data, but it successfully prevents authorized access, thereby violating the principle of availability.
Conclusion
In this lesson, we've defined the CIA triad, the three guiding principles of information security. Understanding this model is fundamental to thinking like a cybersecurity professional.
Here are the key takeaways:
- Confidentiality: Protects information from unauthorized disclosure. In a network, this is often achieved with encryption (like in HTTPS).
- Integrity: Ensures information is accurate and trustworthy. In a network, this can be verified using hashing to check for file tampering.
- Availability: Guarantees that systems and data are accessible when needed. Attacks on availability, like Denial-of-Service (DoS), aim to disrupt access for legitimate users.
You now have a framework for categorizing and understanding security goals. In our next lesson, we will examine specific threats that cybersecurity professionals face daily. We'll take a closer look at common network attacks like phishing, malware, and DoS attacks, and see how they each threaten one or more of the CIA triad's principles. We will also introduce the firewall, a foundational tool used to defend a network.