5.0 Security Fundamentals

Exploits: An exploit is a type of attack that takes advantage of a vulnerability in a system or network. The goal of an exploit is to gain unauthorized access to a system or to cause damage. Exploits can be delivered through various means, such as email attachments, malicious websites, or infected files.

Mitigation techniques

Mitigation techniques are methods used to reduce the risk of a security threat, or to minimize the impact of an attack if it occurs. Some common mitigation techniques include:

1. Access control: limiting who can access a system and what they can do with it

2. Encryption: converting data into a secure, encrypted format to protect it from unauthorized access

3. Firewall: a hardware or software device that enforces security policies by controlling access to a network

4. Patch management: regularly updating software and systems to address known vulnerabilities

5. Backup and recovery: regularly creating backup copies of important data and having a plan for recovering data if it is lost or damaged

6. Antivirus/anti-malware software: software that scans for and removes malicious software

7. User education and awareness: educating users about the dangers of cyber attacks and best practices for avoiding them

8. Incident response plan: having a plan in place for responding to a security breach, including the roles and responsibilities of different individuals.

These are some examples of mitigation techniques, but the specific techniques used will depend on the nature of the threat and the resources available to address it.