A free, self-paced textbook in 7 chapters. Read a chapter, then drill it with the 270 companion flashcards using spaced repetition.
Cybersecurity is the practice of protecting systems, networks, and data from digital attacks, unauthorized access, and damage. At its heart sit three core principles often called t...
Adversaries use a wide range of techniques to compromise systems. Malware, or malicious software, comes in many forms. Viruses attach to programs and spread when executed, while wo...
Cryptography is the technical foundation that makes confidentiality, integrity, authentication, and non-repudiation possible on the internet. A hash is a one-way function that conv...
Identity is the new perimeter in modern security. Authentication establishes who a user is, and authorization determines what they are allowed to do. Multi-factor authentication st...
A layered architecture is essential because no single control is sufficient. A firewall is a device or piece of software that filters network traffic according to rules; stateful f...
Applications are a primary battleground, and the OWASP Top 10 is the most widely cited list of critical web application security risks, including broken access control, cryptograph...
Security operations centers (SOCs) monitor an organization's posture around the clock. When an incident occurs, teams follow a structured incident response process: preparation, id...