https://cyberyigit.com/en/posts/Recent content in Posts on CyberYigit | Cybersecurity & Field NotesHugoen-usSat, 26 Sep 2026 10:00:00 +0300https://cyberyigit.com/en/posts/cia-triad/Sat, 26 Sep 2026 10:00:00 +0300https://cyberyigit.com/en/posts/cia-triad/<p>Every operational defense mechanism and adversary attack vector ultimately touches at least one pillar of the <strong>CIA Triad</strong> (Confidentiality, Integrity, Availability).</p> <h3 id="1-confidentiality">1. Confidentiality</h3> <p>Ensuring data is accessible only to authorized entities and processes.</p> <ul> <li><strong>Vectors:</strong> Packet sniffing, unauthorized data exfiltration, MITM attacks.</li> <li><strong>Mitigation:</strong> Robust encryption (AES-256), multi-factor authentication (MFA), and strict RBAC policies.</li> </ul> <h3 id="2-integrity">2. Integrity</h3> <p>Assurance that digital assets and system binaries have not been altered, wiped, or tampered with.</p> <ul> <li><strong>Vectors:</strong> Unauthorized SQL modifications, malware injection, file manipulation.</li> <li><strong>Mitigation:</strong> Cryptographic hashing (SHA-256), digital certificates, and File Integrity Monitoring (FIM).</li> </ul> <h3 id="3-availability">3. Availability</h3> <p>Guaranteeing uninterrupted access to services and systems for legitimate users.</p>