Information Security (InfoSec)

Start Here | how_to_software_engineer | Coding

Information Security is the practice of protecting data from unauthorized access, modification, or destruction. In a world where everything is digital, InfoSec is the immune system of civilization.

The CIA triad — the foundation:

• Confidentiality — only authorized people can access the data
• Integrity — data hasn’t been tampered with
• Availability — systems are accessible when needed

Key domains:

Network security — firewalls, intrusion detection, VPNs. Protecting data in transit.

Application security — writing software that resists attack. SQL injection, XSS, CSRF — the common vulnerabilities hackers exploit.

Cryptography — the math of secrecy. Encryption, hashing, digital signatures. Related: Merckel Tree, Blockchains.

Identity and access management — authentication (who you are) and authorization (what you’re allowed to do). Passwords, MFA, zero trust.

Incident response — what to do when (not if) you get breached. Detection, containment, recovery, lessons learned.

Social engineering — the most effective attacks target humans, not systems. Phishing and manipulation bypass every technical control.

The mindset: security is not a product — it’s a process. Think adversarially: “How could this be broken? What assumptions am I making?”

For developers: every line of code you write is either making the system more secure or less. Learn the OWASP Top 10. Validate inputs. Encrypt sensitive data.

Related: Open-source Intelligence (OSINT), Computer Science & Quantum BIT, Automation & Artificial Intelligence (AI)