ASKiIMAN™ REALM 13 / COMPUTING
--:-- · -- --- ----

The Shield

Cybersecurity, Privacy, Encryption & Digital Defense

Central Doctrine

Every connected computer system creates assets that must be protected. This realm maps the adversarial frontier of computing. We explore how to defend hardware, software, networks, and human identity against unauthorized access, manipulation, and destruction through cryptography, secure architecture, and relentless monitoring.

ASSET → THREAT → VULNERABILITY → RISK → CONTROL → DETECTION → RESPONSE → RECOVERY

The Internal Chambers

Ontology of Information Security

CHAMBER 01

What is Cybersecurity?

  • Information, Computer, Network, and App security
  • Protecting against unauthorized access and disruption
  • The interplay of Assets, Threats, Vulnerabilities, and Defense
CHAMBER 02

The CIA Triad

C
I
A
  • Confidentiality: Preventing unauthorized disclosure.
  • Integrity: Preventing unauthorized modification.
  • Availability: Preventing service disruption.
CHAMBER 03

Assets

DATA IDENTITY SYSTEMS
  • What we protect: Personal info, Credentials, Accounts
  • Servers, Networks, Databases, Cloud resources
  • Intellectual property and Financial information
CHAMBER 04

Threats

  • Threat actors and attack surfaces
  • Malware, Social engineering, Unauthorized access
  • Fraud, Espionage, and Insider threats
CHAMBER 05

Vulnerabilities

  • Weaknesses in the system
  • Misconfigurations, outdated software, weak authentication
  • Excessive permissions, human error, third-party risk
CHAMBER 06

Risk Assessment

THREAT
×
VULN
×
IMPACT
  • The likelihood of a threat exploiting a vulnerability
  • Risk mitigation, acceptance, transfer, and avoidance
  • Residual risk (what remains after controls)
CHAMBER 07

Attack Surface

  • All points where an unauthorized user can try to enter
  • Exposed network ports, APIs, user accounts
  • Physical access and supply-chain exposure
CHAMBER 08

Authentication

ID
PW
OTP
  • Verifying Identity: "Who are you?"
  • Factors: Know (Password), Have (Phone/Key), Are (Biometrics)
  • Passwords, Passphrases, and Security keys
CHAMBER 09

Authorization

USER → [ ROLE ] → READ
  • Permissions: "What are you allowed to do?"
  • Access control, Roles, and Privileges
  • Least privilege: Giving only the minimum access needed
  • Role-Based Access Control (RBAC)
CHAMBER 11

Password Security

password123 H3aV!ly$alt3d
  • Password strength, reuse, and Password Managers
  • Brute-force, spraying, and credential stuffing
  • Password hashing and Salting for secure storage
CHAMBER 12

Multi-Factor Auth (MFA)

📱+🔑
  • Requiring more than one factor (2FA)
  • Authenticator apps, hardware keys, push notifications
  • Phishing-resistant authentication
CHAMBER 13

Cryptography

  • Plaintext → Encryption → Ciphertext → Decryption
  • Symmetric vs. Asymmetric cryptography
  • Hash functions and digital signatures
CHAMBER 14

Symmetric Encryption

DATA + KEY = CIPHER CIPHER + SAME KEY = DATA
  • Uses a single Shared Secret key for both encryption and decryption
  • AES, Block ciphers, Stream ciphers
  • High performance; used for bulk data encryption
CHAMBER 15

Asymmetric Cryptography

ENCRYPT: PUB KEY DECRYPT: PRIV KEY
  • Uses a Key Pair: Public key and Private key
  • RSA and Elliptic-curve cryptography
  • Used for key exchange, digital signatures, and certificates
CHAMBER 16

Hash Functions

→
H()
→
A94A8FE5
  • One-way function generating a fixed-length digest
  • Any change in input causes an "Avalanche effect" in output
  • Integrity verification (SHA-256)
CHAMBER 17

Digital Signatures

  • Signed with Private Key, verified with Public Key
  • Proves Authenticity and Integrity
  • Non-repudiation: The sender cannot deny sending it.
CHAMBER 19

Public Key Infrastructure

ROOT CA ↓ CERTIFICATE
  • Certificate Authorities (CA) and Trust chains
  • Binding identity to a public key
  • Certificate lifecycle, expiration, and revocation
CHAMBER 20

TLS & HTTPS

  • Transport Layer Security (TLS)
  • Handshake, Server authentication, Key establishment
  • Encryption in transit for secure web channels (HTTPS)
CHAMBER 22-25

Malware Classes

  • Virus: Infects host files, requires execution to replicate.
  • Worm: Self-propagating over networks without human interaction.
  • Trojan: Malicious payload disguised as legitimate software (Backdoors/RATs).
CHAMBER 26

Ransomware

ENCRYPTED PAY TO UNLOCK
  • Data encryption and extortion
  • Double extortion (encrypting + threatening to leak data)
  • Prevention via offline, immutable backups
CHAMBER 27

Phishing

ID
  • Email phishing, Spear phishing (targeted), Whaling (executives)
  • Smishing (SMS) and Vishing (Voice)
  • Fake websites designed for credential harvesting
CHAMBER 28

Social Engineering

MANIPULATION URGENCY • FEAR • TRUST
  • Exploiting human psychology rather than technical flaws
  • Impersonation, Pretexting, and Baiting
  • Authority pressure and tailgating
CHAMBER 32-34

Web Vulnerabilities

<script>
  • SQL Injection: Manipulating database queries. (Fix: Parameterized queries).
  • XSS: Executing malicious scripts in another user's browser. (Fix: Output encoding).
  • CSRF: Forcing authenticated users to execute unwanted actions.
CHAMBER 38/39

Vulnerability & Patching

  • Scanning, discovery, and risk assessment
  • Prioritizing remediation and exposure management
  • Security patches, software updates, and testing
CHAMBER 41-43

Network Security

  • Firewalls: Packet filtering and stateful inspection (Allow/Deny).
  • IDS: Intrusion Detection (Alerts only).
  • IPS: Intrusion Prevention (Blocks threats).
  • Network segmentation
CHAMBER 45

Zero Trust

NEVER TRUST ALWAYS VERIFY
  • Abandoning the "secure perimeter" model
  • Continuous verification and Identity-centric security
  • Assume breach and mandate explicit authorization
CHAMBER 47

IAM

U
G
R
  • Identity and Access Management
  • Users, Groups, Roles, Policies
  • Federation and Single Sign-On (SSO)
  • Privileged Access Management (PAM) for Admins
CHAMBER 49/50

Data Privacy & Protection

  • Personal data collection, processing, and consent
  • Data minimization and purpose limitation
  • Data classification (Public, Internal, Confidential)
  • Data Loss Prevention (DLP) and secure deletion
CHAMBER 55

Incident Response

  • Prepare → Detect → Analyze
  • Contain → Eradicate → Recover
  • Lessons learned and evidence preservation
CHAMBER 57/58

Backup & Continuity

RPO vs RTO
  • Full, Incremental, and Differential backups
  • Offline, immutable backups (Ransomware defense)
  • RPO: Data loss tolerance. RTO: Downtime tolerance.
  • Disaster recovery and business continuity
CHAMBER 61-64

Security Testing

  • Vulnerability assessment vs. Penetration testing
  • Authorized, controlled exploitation
  • Threat modeling (STRIDE) and Secure SDLC
  • Static/Dynamic analysis and code review
CHAMBER 71

Digital Citizenship

  • Digital footprint and online responsibility
  • Privacy, copyright, and information literacy
  • Responsible vulnerability disclosure
  • Digital ethics and respectful behavior
FINAL CHAMBER

The Bridge to Intelligence

REALM 13 taught layered defense:
THREAT → DEFENSE → RECOVERY
↓
But protection is only one side of computing.
What happens when machines begin to LEARN?
DATA → MODEL → INTELLIGENCE
Proceed to REALM 14 → THE INTELLIGENCE ENGINE