Cybersecurity

Attribute Contributions

Prerequisites

Overview

Cybersecurity is the practice of protecting computer systems, networks, applications, and data from unauthorized access, theft, disruption, and damage. It encompasses defensive security (hardening systems, implementing controls, monitoring for threats, and responding to incidents) and offensive security (penetration testing, vulnerability research, and red team operations that simulate attacks to identify weaknesses before adversaries do). The field intersects computer science, network engineering, legal and compliance frameworks, risk management, and applied cryptography.

The threat landscape is adversarial and constantly evolving: attackers adapt their techniques in response to defenses, new vulnerabilities are discovered continuously, and the expanding attack surface of connected devices and cloud services creates new categories of risk. This adversarial dynamic means cybersecurity requires not just technical knowledge but the adversarial thinking style — asking not just how a system works but how it could be made to work incorrectly — that distinguishes effective security practitioners.

Getting Started

Networking fundamentals are the prerequisite technical foundation. Understanding how TCP/IP works — how packets are routed, how connections are established and terminated, how DNS resolves names to addresses — is essential context for understanding network-based attacks and defenses. The OSI model, common protocols (HTTP, DNS, SMTP, TLS), and the function of firewalls and NAT provide the vocabulary for discussing most network security topics.

The OWASP Top Ten — the ten most critical web application security risks — is the standard starting point for web security. Injection attacks (SQL injection, command injection), cross-site scripting (XSS), broken authentication, and insecure direct object references are vulnerabilities that appear repeatedly across applications and whose mechanisms are well-documented. Understanding how each vulnerability works mechanistically — what allows the injection, why the input isn't validated — and how to prevent it through specific secure coding practices is practical foundational knowledge.

Capture the Flag (CTF) competitions are the primary learning environment for offensive security skills. CTFs present intentionally vulnerable systems and challenges that require exploiting specific vulnerability classes to extract flags (proof of compromise). Platforms including HackTheBox, TryHackMe, and PicoCTF provide structured progressions from beginner to advanced challenges that build hands-on skills in web exploitation, reverse engineering, forensics, and cryptography.

Common Pitfalls

Focusing only on offensive techniques without understanding defensive contexts limits applicability. The goal of offensive security (red team) work is to improve defenses; practitioners who understand only how to attack but not how defenders detect and respond produce assessments that are technically impressive but poorly actionable for organizations.

Neglecting the human and process dimensions of security produces technically sophisticated but operationally incomplete security programs. Phishing remains among the most effective attack vectors precisely because it bypasses technical controls by targeting human judgment. Patch management failures, misconfigured cloud services, and credential reuse cause more real-world breaches than novel technical exploits. Security programs that focus entirely on technical controls while ignoring training, process, and configuration management address only part of the problem.

Ignoring authorization before performing offensive security testing is both legally and ethically non-negotiable. Unauthorized access to systems — even without malicious intent — is criminal in most jurisdictions. All offensive security work must be performed only on systems you own or have explicit written authorization to test.

Milestones

Configuring a basic firewall and network security group with appropriate rules, documenting the threat model that justifies each rule, marks foundational defensive competency. Completing a beginner-level CTF challenge independently — exploiting a vulnerability, gaining access, and extracting a flag — marks hands-on offensive skill entry. Performing a complete web application penetration test against an authorized target, documenting all findings with reproducibility steps and risk ratings, marks professional competency.

Advanced practitioners develop original vulnerability research, contribute to security tooling, and lead organizational security programs.

Where to Specialize

Web application security focuses on OWASP vulnerabilities, API security, and secure development practices. Network security covers firewall architecture, intrusion detection, and network forensics. Malware analysis and reverse engineering studies malicious software behavior and attribution. Cloud security addresses the specific controls and misconfigurations of AWS, Azure, and GCP environments. Threat intelligence and incident response focuses on detecting, analyzing, and containing active threats.

Tips for Success

• Think like an attacker — ask how each component of a system could be made to behave incorrectly, not just how it is intended to work.
• Study the OWASP Top Ten thoroughly — these recurring vulnerability classes appear in real systems constantly and have well-documented prevention techniques.
• Use CTF platforms for hands-on practice — HackTheBox and TryHackMe provide structured, legal environments for developing offensive skills.
• Never perform security testing on systems you do not own or have explicit written authorization to test — unauthorized access is criminal regardless of intent.
• Understand the defensive context for all offensive techniques — effective penetration testing requires knowing what defenders see and what makes findings actionable.
• Keep up with current threat intelligence — the most prevalent attack techniques change regularly, and current awareness is as important as foundational knowledge.
• Build a home lab for safe practice — running intentionally vulnerable virtual machines allows technique development without legal or ethical risk.

Practice Quests

Suggested activities for building your Cybersecurity skill at different intensities.

Notable Practitioners

Learning Resources

Ready to start tracking Cybersecurity?