{"id":21648,"date":"2026-11-04T08:40:00","date_gmt":"2026-11-04T05:40:00","guid":{"rendered":"https:\/\/sunucun.com.tr\/blog\/?p=21648"},"modified":"2026-11-04T08:40:00","modified_gmt":"2026-11-04T05:40:00","slug":"what-is-cyber-security","status":"publish","type":"post","link":"https:\/\/sunucun.com.tr\/blog\/what-is-cyber-security\/","title":{"rendered":"What Is Cyber Security? Key Concepts and Types of Threats"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 ez-toc-wrap-center counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/sunucun.com.tr\/blog\/what-is-cyber-security\/#The_Foundation_of_Cyber_Security_The_CIA_Triad\" >The Foundation of Cyber Security: The CIA Triad<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/sunucun.com.tr\/blog\/what-is-cyber-security\/#Sub-Fields_of_Cyber_Security\" >Sub-Fields of Cyber Security<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/sunucun.com.tr\/blog\/what-is-cyber-security\/#The_Most_Common_Cyber_Threats\" >The Most Common Cyber Threats<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/sunucun.com.tr\/blog\/what-is-cyber-security\/#Basic_Measures_for_Individuals\" >Basic Measures for Individuals<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/sunucun.com.tr\/blog\/what-is-cyber-security\/#Basic_Measures_for_Businesses\" >Basic Measures for Businesses<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/sunucun.com.tr\/blog\/what-is-cyber-security\/#For_Server_and_Website_Owners\" >For Server and Website Owners<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/sunucun.com.tr\/blog\/what-is-cyber-security\/#Frequently_Asked_Questions\" >Frequently Asked Questions<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/sunucun.com.tr\/blog\/what-is-cyber-security\/#Are_cyber_security_and_information_security_the_same_thing\" >Are cyber security and information security the same thing?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/sunucun.com.tr\/blog\/what-is-cyber-security\/#Is_antivirus_software_enough\" >Is antivirus software enough?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/sunucun.com.tr\/blog\/what-is-cyber-security\/#Are_small_businesses_targeted_too\" >Are small businesses targeted too?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/sunucun.com.tr\/blog\/what-is-cyber-security\/#Where_should_I_start_for_a_career_in_cyber_security\" >Where should I start for a career in cyber security?<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<p><strong>Cyber security<\/strong> is the set of practices that protect computers, servers, networks, mobile devices and data against unauthorised access, attacks and damage. The goal is to keep information confidential, ensure it isn&#8217;t altered and make sure it&#8217;s available when needed.<\/p>\n<p>In this article we explain the basic concepts of cyber security, its sub-fields, the most common types of threats and the basic measures individuals and businesses can take.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"The_Foundation_of_Cyber_Security_The_CIA_Triad\"><\/span>The Foundation of Cyber Security: The CIA Triad<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<table>\n<thead>\n<tr>\n<th>Principle<\/th>\n<th>Meaning<\/th>\n<th>Example measure<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Confidentiality<\/td>\n<td>Only authorised people can access information<\/td>\n<td>Encryption, access permissions, multi-factor authentication<\/td>\n<\/tr>\n<tr>\n<td>Integrity<\/td>\n<td>Data isn&#8217;t changed without permission<\/td>\n<td>Digital signatures, version control, change logs<\/td>\n<\/tr>\n<tr>\n<td>Availability<\/td>\n<td>Systems work when they&#8217;re needed<\/td>\n<td>Backups, redundant infrastructure, DDoS protection<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2><span class=\"ez-toc-section\" id=\"Sub-Fields_of_Cyber_Security\"><\/span>Sub-Fields of Cyber Security<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li><strong>Network security:<\/strong> firewalls, intrusion detection and prevention systems (IDS\/IPS), VPNs and network segmentation.<\/li>\n<li><strong>Endpoint security:<\/strong> antivirus\/EDR software on computers, phones and servers, and keeping them updated.<\/li>\n<li><strong>Application security:<\/strong> secure coding, web application firewalls (WAF) and security testing.<\/li>\n<li><strong>Cloud security:<\/strong> permission management in cloud accounts and preventing misconfigurations.<\/li>\n<li><strong>Identity and access management:<\/strong> deciding who can access what; the principle of least privilege.<\/li>\n<li><strong>Data security:<\/strong> encryption, data classification and data loss prevention.<\/li>\n<li><strong>Incident response and business continuity:<\/strong> planning what to do during an attack and recovering from backups.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"The_Most_Common_Cyber_Threats\"><\/span>The Most Common Cyber Threats<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<table>\n<thead>\n<tr>\n<th>Threat<\/th>\n<th>How it works<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Phishing<\/td>\n<td>Fake emails, SMS or websites that trick users into giving away passwords or card details<\/td>\n<\/tr>\n<tr>\n<td>Ransomware<\/td>\n<td>Encrypting files and demanding a ransom to unlock them<\/td>\n<\/tr>\n<tr>\n<td>Malware<\/td>\n<td>Getting into systems with viruses, worms, trojans and spyware<\/td>\n<\/tr>\n<tr>\n<td>DDoS attack<\/td>\n<td>Flooding a server or network with requests until it can&#8217;t serve users<\/td>\n<\/tr>\n<tr>\n<td>Brute force<\/td>\n<td>Guessing passwords by trial and error<\/td>\n<\/tr>\n<tr>\n<td>SQL injection and XSS<\/td>\n<td>Exploiting flaws in web applications to access the database or run code in users&#8217; browsers<\/td>\n<\/tr>\n<tr>\n<td>Social engineering<\/td>\n<td>Exploiting people&#8217;s trust instead of a technical flaw<\/td>\n<\/tr>\n<tr>\n<td>Insider threats<\/td>\n<td>Authorised people causing harm, intentionally or not<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2><span class=\"ez-toc-section\" id=\"Basic_Measures_for_Individuals\"><\/span>Basic Measures for Individuals<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ol>\n<li>Use different, long passwords for every account; a password manager makes this easy.<\/li>\n<li>Turn on multi-factor authentication (MFA) wherever possible.<\/li>\n<li>Keep your operating system, browser and apps up to date.<\/li>\n<li>Verify the sender before opening unexpected email attachments and links.<\/li>\n<li>Back up important files regularly to a place separate from your main device.<\/li>\n<li>Avoid sensitive transactions on public Wi-Fi networks.<\/li>\n<\/ol>\n<h2><span class=\"ez-toc-section\" id=\"Basic_Measures_for_Businesses\"><\/span>Basic Measures for Businesses<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li><strong>Asset inventory:<\/strong> know the systems and data you need to protect.<\/li>\n<li><strong>Patch management:<\/strong> apply security updates on a regular schedule.<\/li>\n<li><strong>Access control:<\/strong> give employees only the permissions their work requires, and make MFA mandatory on admin accounts.<\/li>\n<li><strong>Backup strategy:<\/strong> the 3-2-1 rule: 3 copies, 2 different media, 1 copy off-site. Test restoring from backup regularly.<\/li>\n<li><strong>Awareness training:<\/strong> most attacks target people; brief employees regularly.<\/li>\n<li><strong>Regular testing:<\/strong> find weak points before attackers do with vulnerability scanning and penetration testing.<\/li>\n<li><strong>Incident response plan:<\/strong> write down in advance who does what when an attack is detected.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"For_Server_and_Website_Owners\"><\/span>For Server and Website Owners<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li>Use keys instead of passwords for SSH access and disable direct root login.<\/li>\n<li>Leave only the necessary ports open in the firewall.<\/li>\n<li>Use an SSL certificate on your website and keep your CMS and plugins up to date.<\/li>\n<li>Install tools that limit failed login attempts (e.g. Fail2Ban).<\/li>\n<li>Monitor logs regularly and watch for unusual traffic or logins.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Frequently_Asked_Questions\"><\/span>Frequently Asked Questions<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"Are_cyber_security_and_information_security_the_same_thing\"><\/span>Are cyber security and information security the same thing?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>They are closely related. Information security covers protecting all information, including paper documents. Cyber security focuses on digital systems, networks and data.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Is_antivirus_software_enough\"><\/span>Is antivirus software enough?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>No. Antivirus is an important layer, but without updates, strong passwords, MFA, backups and careful use it doesn&#8217;t provide enough protection on its own.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Are_small_businesses_targeted_too\"><\/span>Are small businesses targeted too?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yes. Attackers often scan for any vulnerable system with automated tools; small businesses can be easy targets because they take fewer precautions.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Where_should_I_start_for_a_career_in_cyber_security\"><\/span>Where should I start for a career in cyber security?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Networking fundamentals, Linux and a scripting language (Python, Bash) are a good start. From there you can continue with security fundamentals and hands-on lab work.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cyber security is the set of practices that protect computers, servers, networks, mobile devices and data against unauthorised access, attacks and damage. The goal is to keep information confidential, ensure it isn&#8217;t altered and make sure it&#8217;s available when needed. In this article we explain the basic concepts of cyber security, its sub-fields, the most&hellip;<\/p>\n","protected":false},"author":1,"featured_media":21649,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[1525],"tags":[],"class_list":["post-21648","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-siber-guvenlik"],"_links":{"self":[{"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/posts\/21648","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=21648"}],"version-history":[{"count":1,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/posts\/21648\/revisions"}],"predecessor-version":[{"id":21765,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/posts\/21648\/revisions\/21765"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/media\/21649"}],"wp:attachment":[{"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=21648"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=21648"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=21648"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}