A free, self-paced textbook in 7 chapters. Read a chapter, then drill it with the 120 companion flashcards using spaced repetition.
The foundation of information security rests on several core principles that every practitioner must understand. The CIA triad—Confidentiality, Integrity, and Availability—defines...
People are often the weakest link in any security system, and attackers exploit this through social engineering—the manipulation of human psychology to trick individuals into revea...
Modern cryptography provides the technical backbone for protecting data at rest and in transit, and it comes in two main flavors. Symmetric encryption uses a single shared key to b...
Secure communication over untrusted networks relies on cryptographic tunnels and well-understood protocols. A Virtual Private Network (VPN) creates an encrypted tunnel across a pub...
Authentication and access control in modern environments rely on a handful of well-established protocols. In Windows and Active Directory environments, Kerberos is the dominant aut...
Wireless networks introduce their own set of threats that don't exist on wired infrastructure. An evil twin attack sets up a rogue Wi-Fi access point that mimics a legitimate one i...
Effective security operations depend on continuous monitoring and rapid response. A SIEM (Security Information and Event Management) system collects, correlates, and analyzes log d...