Strategies and technologies for protecting computer systems

We live in a world where almost every facet of our lives is online. Whether we’re sharing personal information with friends on a texting app, emailing confidential documents for work, or spending our money on an e-commerce site, we spend a lot of time – and a lot of data – online.

There’s nothing wrong with this, of course, but it does mean that all of us need to be vigilant about our online security. From safeguarding personal data to protecting intellectual property, effective security measures that fortify our computer systems and networks against ever-evolving cybersecurity threats are essential.

What is cybersecurity?

Cybersecurity is an umbrella term that covers all of the ways we protect computers – in all their forms – from cyber threats. So in addition to protecting personal computers, cybersecurity safeguards everything from applications and operating systems, like Microsoft Windows and Mac OS, to networks and databases. It also covers hardware, such as desktop computers, laptops, mobile devices, and hard drives.

This protection can be preventative, such as warding off unauthorised access by cyber criminals or hackers, but it can also focus on mitigating or reducing the damage caused by the cyberattacks that make it through the net. 

And in most organisations, cybersecurity is the responsibility of information technology (IT) and information security teams.

Why is cybersecurity important?

The more interconnected our world becomes, the more important cybersecurity becomes.

Through cybersecurity, for example, we get data security, which protects confidential and sensitive information against data breaches and data loss. It safeguards personal information such as medical records or financial data such as banking details.

Cybersecurity also helps prevent the kinds of cyberattacks that can lead to severe financial or reputational damage – for individuals and for organisations. And it’s crucial for compliance with data protection regulations and standards, such as the General Data Protection Regulation (GDPR).

“Cyber security is important because smartphones, computers and the internet are now such a fundamental part of modern life, that it’s difficult to imagine how we’d function without them,” says the National Cyber Security Centre. “From online banking and shopping, to email and social media, it’s more important than ever to take steps that can prevent cyber criminals getting hold of our accounts, data, and devices.”

“More than ever,” adds the National Institute of Standards and Technology (NIST), “organizations must balance a rapidly evolving cybersecurity and privacy threat landscape against the need to fulfill business requirements on an enterprise level.”

Cyberattacks: what are the threats that people and organisations need to guard against? 

Cyber threats are constantly evolving, and this makes them a significant security risk management issue within IT security teams. Common types of attacks include:

• Phishing. In phishing scams, cybercriminals deceive users into providing sensitive data through seemingly legitimate emails or messages.
• Ransomware. Ransomware is malicious software that encrypts a user’s data, which is then followed by the attackers demanding payment to restore access.
• Malware. Malware is software that’s designed to harm or exploit a device, service, or network. They can even attack physical security solutions, like CCTV and access control systems.
• Social Engineering. These are techniques that are used to trick people into breaking security procedures. For example, someone might pose as an IT professional to get someone to give them password information.
• Spyware. Spyware is software that enables a user’s information to be covertly transmitted without their knowledge.

Cybersecurity strategies

While the threat of cyberattacks is real, and it’s important not to underestimate the danger they pose, it’s not all bad news – there are lots of ways to protect against cybercrime.

How to secure a computer system

Securing a computer system – or any endpoint device, such as laptops or mobile devices – starts with a few fundamental practices, like installing reputable antivirus software and using strong passwords.

From there, it’s important to perform regular system and application updates. These will pick up any new security measures and certifications implemented by developers, who run regular audits and security assessments to identify vulnerabilities and apply necessary patches or updates.

You can also take simple but highly effective steps like enabling multi-factor authentication wherever possible. Remember, adding a second step to your sign-in process can make all the difference against online threats and is an easy but effective cybersecurity strategy.

How to secure a computer network

At the network level, security typically involves implementing firewalls around the network, and virtual private networks (VPN) that secure remote access permissions and provide a secure tunnel for data transmission across public networks. There are also intrusion detection systems (IDS) and intrusion prevention systems (IPS) to monitor and prevent unauthorised network access.

How to secure a cloud computing service

Cloud security requires a combination of encryption, access management, and regular security audits to protect data stored online. Providers of cloud services often offer built-in security controls, but it’s also important that endpoint users understand their cloud security responsibilities, such as using strong passwords.

Tools and technologies for effective cybersecurity

Effective cybersecurity will integrate a variety of tools and technologies, including:

• Authentication and access control. These policies verify user identities and control access to systems and networks.
• Data encryption. Data encryption algorithms protect data by encoding it and making it inaccessible to unauthorised users. This means that even if data is intercepted, it remains unreadable and secure from exploitation.
• Security software. Security software – such as anti-spyware, anti-ransomware, and antivirus software – is common for a reason, protecting against a variety of malware infections and other security threats.
• Firewalls. Firewalls are an essential network security tool used for monitoring incoming and outgoing network traffic. They block unauthorised access while still allowing legitimate communications.
• Security incident response protocols. Designed to provide a quick, effective response to security breaches, these processes and plans aim to limit the damage from successful attacks and get systems back online as quickly as possible.
• Application security. Web and mobile applications are diverse – ranging from professional work applications to game apps on mobile devices – which means there’s no single security plan or tool that will work for all of them. Application security, therefore, focuses on making individual apps more secure by finding, fixing, and enhancing their security.

The future of cybersecurity

With all eyes currently on the exciting emerging areas of technology – artificial intelligence (AI), the internet of things (IoT), and so on – it’s important to remember that as technology evolves, so do cybercriminals.

New tech means new ways to exploit vulnerabilities, so standards and regulations have to keep up, as do security tools and technologies.

Launch your career in cybersecurity

Learn how to protect systems and data with the 100%-online MSc Computer Science at the University of Wolverhampton. This flexible Master’s degree has been developed for ambitious individuals who may not have a background in computer science.

You’ll explore security in everything from database systems to the Internet of Things and learn how to implement countermeasures to minimise the risk of vulnerabilities in systems.