What Is Cybersecurity?

Cybersecurity is a field of engineering and computer science concerned with protecting computer systems, networks, and data against unauthorized access, theft, disruption, and attack. It draws on cryptography, software engineering, network design, and applied mathematics to defend against adversaries ranging from opportunistic cybercriminals to state-sponsored actors. The discipline is organized around three foundational properties: confidentiality (keeping data accessible only to authorized parties), integrity (ensuring information is not tampered with), and availability (guaranteeing that systems remain operable when needed).

The field emerged alongside the growth of networked computing in the late 20th century and has expanded dramatically as digital infrastructure became central to financial systems, healthcare, utilities, and government operations. The IEEE Standards Association's cybersecurity standards portfolio addresses requirements spanning cryptographic protocol design, authentication mechanisms, and security for industrial control systems.

Cryptography and Encryption

Cryptography is the mathematical foundation of secure communication, providing mechanisms that transform data into a form unreadable without the appropriate key. Symmetric-key ciphers, such as the Advanced Encryption Standard (AES), use a single shared key for encryption and decryption and are well suited to bulk data. Public-key systems, introduced by Diffie and Hellman in 1976, allow two parties to establish a shared secret over an insecure channel using mathematically related key pairs, forming the basis of protocols such as TLS and SSH. NIST's Post-Quantum Cryptography standardization project has produced a suite of algorithm standards designed to resist attack by quantum computers, which threaten the security of widely deployed public-key systems.

Network and Application Security

Network security encompasses the policies, hardware, and software that monitor and control traffic crossing computing infrastructure. Firewalls enforce access control rules at network boundaries, while intrusion detection systems analyze packet flows for signatures or behavioral anomalies indicating attack. Application security extends protection to the software layer, guarding against vulnerabilities such as SQL injection, buffer overflow, and cross-site scripting, each of which allows an attacker to manipulate programs by supplying malformed inputs. Penetration testing and static analysis are applied during development to identify and remediate such weaknesses before deployment.

Threat Landscape

The threats cybersecurity addresses span a wide range of techniques and motivations. Malware encompasses viruses, worms, ransomware, spyware, and trojans, each designed to compromise, encrypt, exfiltrate, or destroy data on target systems. Phishing attacks exploit social engineering to trick users into divulging credentials or executing malicious code delivered by email or fraudulent websites. Denial-of-service attacks overwhelm system resources to deny legitimate users access, often coordinated across botnets comprising thousands of compromised machines. At the state level, cyber espionage and cyberwarfare operations have targeted critical infrastructure including power grids, electoral systems, and defense networks.

Identity and Access Management

Controlling which identities may access which resources is central to cybersecurity practice. Authentication systems verify users and devices through passwords, cryptographic tokens, biometrics, or combinations of these factors. Multi-factor authentication reduces the risk of credential-based intrusion by requiring a verification step that an attacker cannot replicate simply by stealing a password. Authorization policies determine what authenticated identities are permitted to do, with the principle of least privilege specifying that each account or process should hold only the permissions its function requires. The NIST Cybersecurity Framework 2.0, released in February 2024, organizes security practice around six functions: Govern, Identify, Protect, Detect, Respond, and Recover, providing a structured vocabulary for organizations assessing and improving their security posture.

Applications

Cybersecurity has applications in a wide range of sectors, including:

• Critical infrastructure protection, covering energy grids, water treatment systems, and transportation networks
• Financial services, where fraud detection and transaction integrity are regulatory requirements
• Healthcare, protecting electronic medical records and networked medical devices
• Cloud computing environments hosting enterprise applications and data
• National defense and intelligence operations
• Consumer mobile devices and Internet of Things networks