cyber Adventura

While writing this blogpost I am reminded of a recent article about a child’s reaction “cool, you 3D-printed the save icon!” when his dad showed him a floppy disk for the first time.

Hilarious and Incredible isn’t it ? 10 to 15 years back we were still using floppy disks, now they are simply extinct like dinosaurs. Every thing is fast evolving including that of technology as well as the threats around it. What was perhaps a simple task of securing a standalone computer and its program has completely evolved and constantly changing in galloping speed.

But where did it all start ?

The evolution of cybersecurity can be traced back to the early days of computing when the focus was primarily on protecting physical assets like mainframe computers. Here’s a summarised evolutionary account of the key milestones and developments in the field.

The 70s

The birth of cybersecurity can be traced back to the 1970s when the internet was in its infancy. At this time, security concerns were relatively minimal, with a primary focus on plain vanilla physical security and access controls.

The 80s

The advent of personal computers and the growing use of networks led to an increased need for cybersecurity.

The first computer viruses emerged during this decade, including the notorious Morris Worm in 1988, which infected thousands of computers and highlighted the vulnerabilities of interconnected systems.

This was also the time when “The Trusted Computer System Evaluation Criteria (TCSEC)” , also known as the “Orange Book,” was introduced by the U.S. Department of Defense. It defined security levels and requirements for computer systems.

The 90s

As the internet became more widely accessible, cybersecurity threats multiplied. The concept of firewalls emerged to protect networks from unauthorized access. Public-key cryptography gained prominence, providing secure communication over insecure networks. The Computer Emergency Response Team (CERT) was established in 1988 as a response to increasing cyber threats.

Early 2000s

Cybersecurity threats continued to escalate with the rise of e-commerce and online services. Distributed Denial of Service (DDoS) attacks gained attention, with major incidents like the 2000 attacks against Yahoo!, eBay, and Amazon. The field of cybersecurity began to gain recognition as a critical aspect of business operations.

Mid-2000s

Malware attacks, including viruses, worms, and Trojans, became more sophisticated, leading to an increased focus on antivirus software and intrusion detection systems. Large-scale data breaches started to occur, exposing sensitive user information and driving the need for better data protection.

Late 2000s

The emergence of social media platforms and mobile computing brought new security challenges. Cybercriminals exploited vulnerabilities in mobile devices and launched attacks targeting users’ personal information. The concept of “bring your own device” (BYOD) further complicated security management in organizations.

2010s

Cybersecurity threats continued to evolve rapidly. Advanced persistent threats (APTs) gained prominence, with state-sponsored actors conducting targeted attacks on government entities, corporations, and critical infrastructure. Ransomware attacks became prevalent, encrypting users’ data and demanding ransom for its release. The importance of incident response and cybersecurity awareness grew.

Recent years

The cybersecurity landscape has witnessed the proliferation of Internet of Things (IoT) devices, expanding the attack surface. Artificial intelligence (AI) and machine learning (ML) have been applied to both offensive and defensive cybersecurity techniques. Additionally, privacy concerns have gained significant attention with the enactment of regulations like the EU’s General Data Protection Regulation (GDPR).

Overall, the history of cybersecurity showcases the ever-evolving nature of threats and the need for continuous advancements in security technologies, policies, and practices. It has evolved from a focus on physical security to encompass various domains such as network security, data protection, incident response, and the human factor. Cybersecurity has become a critical aspect of modern society, requiring constant vigilance and proactive measures to mitigate risks and protect digital assets.