Types of Cyber Security & Key Comparisons

Table of Contents

1. Overview of Cyber Security Types
2. Network Security
3. Application Security
4. Information Security
5. Endpoint Security
6. Cloud Security
7. Identity and Access Management (IAM)
8. Incident Response
9. Compliance and Governance
10. How All Types Work Together
11. Cyber Security vs Information Security
12. Cyber Security vs Networking
13. Cyber Security vs Software Engineering
14. Comparison Summary Table

Overview of Cyber Security Types

Cyber security is a broad field with multiple specialized domains. Each domain focuses on protecting different parts of the digital ecosystem.

The Building Analogy

Think of cyber security like securing a large building:

Why So Many Types?

Because attackers target different parts of a system:

Attacker tries to:
  ├── Hack your WiFi → Network Security needed
  ├── Exploit app bug → Application Security needed
  ├── Steal database → Information Security needed
  ├── Infect your laptop → Endpoint Security needed
  ├── Breach cloud storage → Cloud Security needed
  ├── Steal your password → IAM needed
  └── Attack during response → Incident Response needed

1. Network Security

What It Is

Network security protects the data traveling across networks and the network infrastructure itself.

What It Protects

Common Tools & How They Work

Real-World Scenario

Scenario: You're working from a coffee shop.

• Without network security: Anyone on the same WiFi can intercept your data
• With VPN (network security): All your traffic is encrypted — even if someone intercepts it, they can't read it

Best Practices

2. Application Security

What It Is

Application security focuses on keeping software and apps secure throughout their entire lifecycle — from design to deployment to maintenance.

What It Protects

Security Throughout the SDLC

Design  →  Develop  →  Test  →  Deploy  →  Maintain
  │          │          │        │          │
  ▼          ▼          ▼        ▼          ▼
Secure    Secure     Pen      Security   Patch
Design    Coding     Testing  Config     Management
Reviews   Standards           Review

Common Security Practices

Real-World Scenario

Scenario: A banking app has a vulnerability in its login form.

• Without application security: Hackers can use SQL Injection to access the database and steal customer accounts
• With input validation (application security): The app rejects malicious inputs, blocking the attack

Common Application Attacks

3. Information Security

What It Is

Information security protects data — whether stored digitally, in transit, or even on paper. It's about protecting the information itself, regardless of format.

What It Protects

Core Practices

Data Classification Levels

Remember: Information security is about protecting the data itself, not just the systems that hold it.

4. Endpoint Security

What It Is

Endpoint security protects individual devices — the "endpoints" that connect to networks. Each endpoint is a potential entry point for attackers.

Types of Endpoints

Security Tools for Endpoints

Real-World Scenario

Scenario: An employee loses their laptop at the airport.

• Without endpoint security: All data on the laptop is accessible to whoever finds it
• With full-disk encryption (endpoint security): The data is unreadable without the password
• With MDM: IT can remotely wipe the device

Best Practices

1. Keep OS updated — Patch vulnerabilities promptly
2. Use strong passwords/PINs — On ALL devices, not just computers
3. Enable remote wipe — In case of loss or theft
4. Install antivirus/EDR — On all devices
5. Disable unnecessary features — Bluetooth, NFC when not in use
6. Avoid jailbreaking/rooting — Bypasses built-in security
7. Use separate profiles — Separate work and personal on same device

5. Cloud Security

What It Is

Cloud security protects data, applications, and infrastructure in cloud environments like AWS, Google Cloud, Microsoft Azure, and private clouds.

Shared Responsibility Model

One of the most important concepts in cloud security:

┌──────────────────────────────────────────────────────┐
│          RESPONSIBILITY OF CLOUD PROVIDER            │
│  (AWS / Azure / Google Cloud)                       │
│  - Physical security of data centers                │
│  - Network infrastructure                           │
│  - Hypervisor security                              │
├──────────────────────────────────────────────────────┤
│          RESPONSIBILITY OF CUSTOMER                  │
│  (YOU / YOUR COMPANY)                               │
│  - Data encryption                                  │
│  - Access configurations                            │
│  - Application security                             │
│  - User access management                           │
└──────────────────────────────────────────────────────┘

Cloud Security Challenges

Real-World Cloud Security Mistake

Case: A company leaves an AWS S3 bucket (cloud storage) publicly accessible.

• Result: Anyone on the internet can read, download, or delete the data
• Real example: Accenture (2021) — 4TB of data exposed due to misconfigured cloud storage
• Lesson: Always double-check cloud configuration settings!

Best Practices

• Enable MFA for ALL cloud accounts
• Use least privilege for cloud permissions
• Encrypt data at rest and in transit in the cloud
• Enable logging and monitoring (CloudTrail, Azure Monitor)
• Regularly audit cloud configurations
• Use cloud security posture management (CSPM) tools

6. Identity and Access Management (IAM)

What It Is

IAM manages who can access what — ensuring the right people have the right access to the right resources at the right time.

Core Components of IAM

IAM
├── Identification (Who claims to be?)
├── Authentication (Prove it!)
├── Authorization (What can you do?)
└── Auditing (What did you do?)

Key IAM Concepts

The Principle of Least Privilege in IAM

"Give users ONLY the permissions they absolutely need — and for ONLY as long as they need them."

Real-World Scenario

Scenario: An employee's credentials are stolen.

• Without IAM: The attacker has access to everything the employee could access
• With IAM + Least Privilege: The attacker can only access the minimum resources, limiting damage
• With MFA enabled: The stolen password alone isn't enough — attacker can't log in

7. Incident Response

What It Is

Incident response is the structured approach to handling security breaches when they happen — because despite all prevention, breaches can still occur.

The 6-Phase Incident Response Process

   Preparation
       │
       ▼
   Detection & Analysis
       │
       ▼
   Containment
       │
       ▼
   Eradication
       │
       ▼
   Recovery
       │
       ▼
   Lessons Learned ◄───── Back to Preparation

Incident Response Team (CSIRT)

Real-World Incident Response

Scenario: Ransomware encrypts files on a company server.

1. Detection: Alert from antivirus about encryption activity
2. Containment: IT immediately disconnects the server from the network
3. Analysis: Determine how ransomware entered (phishing email)
4. Eradication: Remove ransomware, patch the entry point
5. Recovery: Restore files from backup
6. Lessons: Train employees on phishing awareness, improve email filtering

8. Compliance and Governance

What It Is

Ensuring the organization follows laws, regulations, and standards related to security and data protection.

Major Regulations Worldwide

Key Security Standards

Compliance vs Security

Important: Being compliant does NOT mean you're secure. Compliance is the minimum baseline, not the goal.

How All Types Work Together

A Complete Security Posture

Different security types don't work in isolation — they overlap and complement each other:

                    ┌──────────────────────┐
                    │    GOVERNANCE        │
                    │  (Rules & Compliance) │
                    └──────────────────────┘
                            ┌──────────────────────┐
                            │        IAM           │
                            │  (Who can do what?)  │
                            └──────────────────────┘
      ┌─────────────┬───────────────┬──────────────────┐
      │             │               │                  │
      ▼             ▼               ▼                  ▼
┌──────────┐ ┌───────────┐ ┌─────────────┐ ┌──────────────┐
│ NETWORK  │ │APPLICATION│ │ INFORMATION │ │  ENDPOINT    │
│ SECURITY │ │ SECURITY  │ │  SECURITY   │ │  SECURITY    │
└──────────┘ └───────────┘ └─────────────┘ └──────────────┘
      │             │               │                  │
      └─────────────┴───────────────┴──────────────────┘
                            │
                            ▼
                    ┌──────────────────────┐
                    │  INCIDENT RESPONSE   │
                    │  (When things go wrong)│
                    └──────────────────────┘
                            │
                            ▼
                    ┌──────────────────────┐
                    │    CLOUD SECURITY     │
                    │  (Protecting everything│
                    │   in the cloud)       │
                    └──────────────────────┘

Example: A Company's Complete Security

Cyber Security vs Information Security

Many people use these terms interchangeably, but they have distinct meanings:

The Relationship

Information Security is the broader umbrella. Cyber Security is a subset focused on digital threats.

Detailed Comparison

Examples to Clarify

Simple Way to Remember

Information Security = Protecting ALL information (any format) Cyber Security = Protecting digital information specifically

Think of it like:

• Information Security = Your entire home security system (locks, cameras, alarm, safe, fence)
• Cyber Security = The digital/electronic parts (smart locks, online camera feeds, digital alarm system)

Cyber Security vs Networking

How They Differ

How They Work Together

Networking and cyber security are complementary — you need both:

• Networking builds the roads (connections) for data to travel
• Cyber Security puts up the security cameras and checkpoints on those roads

A network engineer sets up a company's WiFi network; a security professional ensures that network is protected from hackers.

The Relationship in Practice

Networking = HOW data moves
Cyber Security = HOW to protect that moving data

You can't have good security without understanding networking, and a network isn't useful if it's not secure!

Cyber Security vs Software Engineering

How They Overlap (DevSecOps)

Modern development integrates security into the software development process — this is called DevSecOps:

Traditional:  Dev → Sec → Ops (Security at the end)
DevSecOps:    Dev + Sec + Ops (Security throughout)

Comparison Summary Table