The document provides an overview of the history of cybersecurity threats dating back to the 1970s. It discusses several notable early cyber attacks and issues, including the first computer worm in 1971, the Morris worm of 1988 which was the first large-scale Internet worm and one of the first computer viruses, the ILOVEYOU worm of 2000 which infected over 10 million Windows users worldwide within few days, and the increasing issues of phishing, malware, and SQL injection attacks over the decades. It also outlines some common types of cybersecurity practices like network security, data loss prevention, and intrusion detection/prevention. Finally, it discusses the growing opportunities in cybersecurity field given the increasing threats and investments by organizations.

1. INTRODUCTION
TO
CYBER SECURITY
BY
Dr. Kailash Shaw
Introdcution to Cyber Security; Dr. Kailash Shaw 1

2. Cyber Threats
Many people assume that cybersecurity is a new vector, relatively starting within the last decade. However,
cybersecurity history dates back to the 70’s, before most people even had a computer.
1971: First Computer Worm
1989: The First Denial-of-Service (DoS) Attack
1989: AIDS_Trojan
2000: ILOVEYOU Worm
1998: SQL Injection Attack
1987, 1995 , 2001-2019 Phishing and Spear Phishing
Attacks
1989 – 2020 Malware
Botnets
Cross-Site Scripting Attacks
https://www.timetoast.com/timelines/historia-web-44886443-6e77-4cc5-bc14-adf135ef51c1
Introdcution to Cyber Security; Dr. Kailash Shaw 2

3. Cyber Threats
Many people assume that cybersecurity is a new vector, relatively starting within the last decade. However,
cybersecurity history dates back to the 70’s, before most people even had a computer.
1971: First Computer Worm
1989: The First Denial-of-Service (DoS) Attack
Robert Morris
• Morris did not write the worm to cause damage
• Morris created it to highlight security flaws such as Unix
sendmail and weak passwords
• However, the code made the worm replicate excessively,
causing damages estimated around $100,000 to
$10,000,000
1989: AIDS_Trojan
2000: ILOVEYOU Worm
1998-2020: SQL Injection Attack
1987, 1995 , 2001-2019 Phishing and Spear Phishing
Attacks.
1989 – 2020 Malware
Botnets
Cross-Site Scripting Attacks
https://securityboulevard.com/2020/06/denial-of-service-dos-attacks-web-
based-application-security-part-7/Introdcution to Cyber Security; Dr. Kailash Shaw 3

4. Cyber Threats
Many people assume that cybersecurity is a new vector, relatively starting within the last decade. However,
cybersecurity history dates back to the 70’s, before most people even had a computer.
1971: First Computer Worm
1989: The First Denial-of-Service (DoS) Attack
1989: AIDS_Trojan
• Jospeh Popp creating the first ransomware attack
• virus only scrambs the names of the files and extort
money from People.
2000: ILOVEYOU Worm
1998-2020: SQL Injection Attack
1987, 1995 , 2001-2019 Phishing and Spear Phishing
Attacks.
1989 – 2020 Malware
Botnets
Cross-Site Scripting Attacks
https://www.slideshare.net/ManojKumarMishra15/ransomware-the-
clock-is-ticking
Introdcution to Cyber Security; Dr. Kailash Shaw 4

5. Cyber Threats
Many people assume that cybersecurity is a new vector, relatively starting within the last decade. However,
cybersecurity history dates back to the 70’s, before most people even had a computer.
1971: First Computer Worm
1989: The First Denial-of-Service (DoS) Attack
1989: AIDS_Trojan
2000: ILOVEYOU Worm
• The ILOVEYOU worm infected millions of computer
worldwide within a mere few hours of its release.
• The worm is one of the most damaging worms in history.
• Affected more than 500,000 systems in 2000 and
produced over $15 billion in damages, including $5.5
billion in the first week alone.
1998-2020: SQL Injection Attack
1987, 1995 , 2001-2019 Phishing and Spear Phishing
Attacks.
1989 – 2020 Malware
Botnets
Cross-Site Scripting Attacks
https://en.wikipedia.org/wiki/ILOVEYOU
Introdcution to Cyber Security; Dr. Kailash Shaw 5

6. Cyber Threats
Many people assume that cybersecurity is a new vector, relatively starting within the last decade. However,
cybersecurity history dates back to the 70’s, before most people even had a computer.
1971: First Computer Worm
1989: The First Denial-of-Service (DoS) Attack
1989: AIDS_Trojan
2000: ILOVEYOU Worm
1998: SQL Injection Attack
• The first public discussions of SQL injection started
appearing at article in Phrack Magazine.
• SQL injection attack can result in confidential data
being deleted, lost or stolen; websites being defaced;
unauthorized access to systems or accounts and,
ultimately, compromise of individual machines or entire
networks
1987, 1995 , 2001-2019 Phishing and Spear Phishing
Attacks.
1989 – 2020 Malware
Botnets
Cross-Site Scripting Attacks
https://spanning.com/blog/sql-injection-attacks-web-based-application-security-part-4/
Introdcution to Cyber Security; Dr. Kailash Shaw 6

7. Cyber Threats
Many people assume that cybersecurity is a new vector, relatively starting within the last decade. However,
cybersecurity history dates back to the 70’s, before most people even had a computer.
1971: First Computer Worm
1989: The First Denial-of-Service (DoS) Attack
1989: AIDS_Trojan
2000: ILOVEYOU Worm
1998: SQL Injection Attack
1987, 1995 , 2001-2019 Phishing and
Spear Phishing Attacks
1989 – 2020 Malware
Botnets
Cross-Site Scripting Attacks
https://ascensiongt.com/2019/12/29/spear-phishing/Introdcution to Cyber Security; Dr. Kailash Shaw 7

8. Cyber Threats
Many people assume that cybersecurity is a new vector, relatively starting within the last decade. However,
cybersecurity history dates back to the 70’s, before most people even had a computer.
1971: First Computer Worm
1989: The First Denial-of-Service (DoS)
Attack
1989: AIDS_Trojan
2000: ILOVEYOU Worm
1998: SQL Injection Attack
1987, 1995 , 2001-2019 Phishing and
Spear Phishing Attacks
"APWG Phishing Attack Trends Reports". Retrieved May 5, 2019.
0
200,000
400,000
600,000
800,000
1,000,000
1,200,000
1,400,000
1,600,000
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
Phishing Attacks
Botnets
Cross-Site Scripting Attacks
Introdcution to Cyber Security; Dr. Kailash Shaw 8

9. Cyber Threats
Many people assume that cybersecurity is a new vector, relatively starting within the last decade. However,
cybersecurity history dates back to the 70’s, before most people even had a computer.
1971: First Computer Worm
1989: The First Denial-of-Service (DoS)
Attack
1989: AIDS_Trojan
2000: ILOVEYOU Worm
1998: SQL Injection Attack
1987, 1995 , 2001-2019 Phishing and
Spear Phishing Attacks
Malware
• (malicious software) is a term used to describe any
program or code that is created with the intent to do
harm to a computer, network, or server.
• In finance 7.5% atatcks are due to Malware
• Financial data Theft increases by 18.6%
• Studies shows that Company investing $6500 per hour
to deal with Malware.
Botnets
Cross-Site Scripting Attacks
https://www.cisecurity.org/blog/top-10-malware-september-
2019/
Introdcution to Cyber Security; Dr. Kailash Shaw 9

10. Cyber Threats
Many people assume that cybersecurity is a new vector, relatively starting within the last decade. However,
cybersecurity history dates back to the 70’s, before most people even had a computer.
1971: First Computer Worm
1989: The First Denial-of-Service (DoS)
Attack
1989: AIDS_Trojan
2000: ILOVEYOU Worm
1998: SQL Injection Attack
1987, 1995 , 2001-2019 Phishing and
Spear Phishing Attacks
Malware
Botnets
• A network of private computers infected with malicious
software and controlled as a group without the owners'
knowledge
• In 2019 as downtime from each attack is estimated to
exceed £140,000
Cross-Site Scripting Attacks
https://blog.emsisoft.com/en/27233/what-is-a-botnet/
Introdcution to Cyber Security; Dr. Kailash Shaw 10

11. Cyber Threats
Many people assume that cybersecurity is a new vector, relatively starting within the last decade. However,
cybersecurity history dates back to the 70’s, before most people even had a computer.
1971: First Computer Worm
1989: The First Denial-of-Service (DoS)
Attack
1989: AIDS_Trojan
2000: ILOVEYOU Worm
1998: SQL Injection Attack
1987, 1995 , 2001-2019 Phishing and
Spear Phishing Attacks
Cross-Site Scripting Attacks
Malware
Cross-Site Scripting (XSS) attacks are a type of injection, in
which malicious scripts are injected into otherwise benign
and trusted websites. https://spanning.com/blog/cross-site-scripting-web-based-application-
security-part-3/
Introdcution to Cyber Security; Dr. Kailash Shaw 11

12. Cybersecurity
 Cybersecurity is the state or process of protecting and recovering computer systems, networks, devices, and
programs from any type of cyber attack.
 Cyber attacks are an increasingly sophisticated and evolving danger to your sensitive data, as attackers
employ new methods powered by social engineering and artificial intelligence to circumvent traditional
security controls.
Why is cybercrime increasing?
• To Easily Make Money with cyber attack with ransomware,
phishing, and spyware.
• To Steal Confidential Information of Organization or Country
• Gaining Access to Financial Information, Credit Card Number,
Bank Details.
• Spoiling the Organization Fame
Factors driving the growth in cybercrime include?
• The distributed nature of the Internet
• The ability for cybercriminals to attack targets outside their
jurisdiction making policing extremely difficult
• Increasing profitability and ease of commerce on the dark web.
• The proliferation of mobile devices and the Internet of Things.
Introdcution to Cyber Security; Dr. Kailash Shaw 12

13. Be Careful Be Safe
https://cybercrime.gov.in/pdf/Job%20Fraud%20Brochure%
20Final.pdf
https://cybercrime.gov.in/pdf/Matrimonial%20fraud%20brochu
re%20final.pdf
https://cybercrime.gov.in/pdf/Safe%20Use%20of%20social%2
0Media%20Platform%20Brochure%20final.pdf
https://cybercrime.gov.in/pdf/Financial%20Fraud%20Bro
chures%20final.pdf Introdcution to Cyber Security; Dr. Kailash Shaw 13

14. Common types of cybersecurity
Network Security protects network traffic by controlling
incoming and outgoing connections to prevent threats from
entering or spreading on the network.
Data Loss Prevention (DLP) protects data by focusing on the
location, classification and monitoring of information at rest, in
use and in motion.
Cloud Security provides protection for data used in cloud-
based services and applications.
Intrusion Detection Systems (IDS) or Intrusion Prevention
Systems (IPS) work to identify potentially hostile cyber activity.
Identity and Access Management (IAM) use authentication
services to limit and track employee access to protect internal
systems from malicious entities.
Encryption is the process of encoding data to render it
unintelligible, and is often used during data transfer to prevent
theft in transit.
Antivirus/anti-malware solutions scan computer systems for
known threats. Modern solutions are even able to detect
previously unknown threats based on their behavior.
https://www.sciencedirect.com/science/article/abs/pii/S10848045160
00102
Introdcution to Cyber Security; Dr. Kailash Shaw 14

15. Opportunity In Cyber Security
 Strong growth:
Expected to reach $170 billion by 2020 (Forbes)
 Corporates (and even SMEs)
Investing around 20% of budget on cybersecurity
 Consumer products (anti-virus, malware, etc)
Now commoditized
 For Enterprise Security is Key
 Cyber-attacks on businesses and governments
globally driving huge spend.
 Last year, NASSCOM reported that India
alone would need 1 million cyber security
professionals by 2020.
 Companies like KPMG have doubled the size
of their cyber security teams in recent years.
Network Security Engineer:
Cyber Security Analyst
Security Architect
Cyber Security Manager:
Chief Information Security Officer (CISO): Rs 2 crores to
4 crores
Rs 12 lakhs per annum
Rs 17 lakhs per annum
Rs 6 lakhs per annum
RS 4 to 8 lakhs per annum
Introdcution to Cyber Security; Dr. Kailash Shaw 15

16. THANK YOU
Introdcution to Cyber Security; Dr. Kailash Shaw 16