Cybersecurity
Defending systems against malicious actors.
Cybersecurity addresses defending systems against malicious actors. It sits within Systems and inherits that area’s core questions about correctness, scale, and tractability. This page surveys the conceptual axes of the topic and points to the references that frame ongoing research and teaching. The intent is to be useful both as an entry point for newcomers and as an index for practitioners cross-checking their mental model against the field’s primary sources.
Work on cybersecurity can be organised around a few interlocking concerns: the formal objects under study, the algorithms or systems that compute over them, the resource trade-offs (time, memory, communication, statistical efficiency), and the empirical or theoretical guarantees that practitioners rely on. The sources cited below approach the topic from a mix of these angles.
Foundational references
Anderson, Security Engineering (2020) is a standard reference for this material and is used both as a curriculum anchor and as a long-form survey of techniques.
Supporting and complementary work
Stallings, Computer Security: Principles and Practice (2017) provides supporting material that complements the primary references — readers comparing approaches will find useful framings, alternative notations, or extensions there.
Open methodological questions in cybersecurity cluster around how to compose the techniques above under realistic constraints — scale, adversarial inputs, partial observability, and shifting workloads. The cited references give the precise statements, proofs, and empirical evaluations that this overview only sketches; downstream topic pages drill into specific subfields.
Prerequisites
Sources
-
- textbook · supporting · 2017Computer Security: Principles and Practicestallings-2017
In context
Where this topic sits in the prerequisite graph. Click any node to jump.
Explore
- 01
Systems Security
Kernel and OS security, privilege models, and isolation.
- 02
Memory Safety
Buffer overflows, use-after-free, and modern mitigations.
- 03
Software Vulnerabilities
Common vulnerability classes and exploitation techniques.
- 04
Web Security
XSS, CSRF, SQL injection, and browser security model.
- 05
Malware Analysis
Static and dynamic analysis of malicious code.
- 06
Intrusion Detection
Signature- and anomaly-based detection systems.
- 07
Side-Channel Attacks
Cache, timing, and microarchitectural side channels.
- 08
Hardware Security
Trojans, secure boot, and hardware root of trust.
- 09
Trusted Execution Environments
Intel SGX, ARM TrustZone, and confidential computing.
- 10
Authentication Systems
Passwords, MFA, FIDO2, and identity protocols.
- 11
Access Control
DAC, MAC, RBAC, and ABAC.
- 12
Security Engineering
Threat modeling, secure design, and supply-chain security.
- 13
Machine Learning Security
Adversarial examples, model extraction, and poisoning.
- 14
Privacy-Enhancing Technologies
Anonymous communication, Tor, mix networks.
- 15
Usable Security
Human factors in security and privacy.
Review this topic
This page was drafted by an agent and is waiting on expert review. Spotted a wrong prerequisite, a missing concept, a misattributed source, or a factual slip? Tell us — your review opens a tracked issue maintainers act on.