CyBOK — The Cybersecurity Body of Knowledge

The Forensics chapter provides a technical overview of digital forensic techniques and capabilities, and to put them into a broader perspective with regard to other related areas in the cybersecurity domain. The discussion on legal aspects of digital forensics is limited only to general principles and best practices, as the specifics of the application of these principles tend to vary across jurisdictions.

We speak with CyBOK Forensics author Vassil Roussev for an introductory overview of the topic.

Cyber-Physical Systems Security are engineered systems that are built from, and depend upon, the seamless integration of computation, and physical components. While automatic control systems like the steam governor have existed for several centuries, it is only in the past decades that the automation of physical infrastructures like the power grid, water systems, or chemical reactions have migrated from analogue controls to embedded computer-based control, often communicating through computer-based networks.

We speak with CyBOK Cyber-Physical Systems Security author Alvaro Cardenas for an introductory overview of the topic.

The purpose of the Software Security chapter is to provide a structured overview of known categories of software implementation vulnerabilities, and of techniques that can be used to prevent or detect such vulnerabilities, or to mitigate their exploitation.

We speak with CyBOK Software Security Knowledge Area author Frank Piessens for an introductory overview of the topic.

The purpose of this chapter is to explain the various aspects of cryptography which we feel should be known to an expert in cyber-security.

We speak with CyBOK Cryptography Knowledge Area author Nigel Smart for an introductory overview of the topic.

After nearly 40 years of research and development, the Security Operations and Incident Management domain has reached a sufficient maturity to be deployed in many environments.

We speak with CyBOK Security Operations and Incident Management Knowledge Area author Hervé Debar for an introductory overview of the topic.

The purpose of this Secure Software Lifecycle knowledge area is to provide an overview of software development processes for implementing secure software from the design of the software to the operational use of the software.

We speak with CyBOK Secure Software Lifecycle Knowledge Area author Laurie Williams for an introductory overview of the topic.

Welcome to CyBOK, the Cybersecurity Body of Knowledge.

A comprehensive Body of Knowledge to inform and underpin education and professional training for the cyber security sector.

The CyBOK project aims to bring cyber security into line with the more established sciences by distilling knowledge from major internationally-recognised experts to form a Cyber Security Body of Knowledge that will provide much-needed foundations for this emerging topic.

The project, funded by the National Cyber Security Programme, is led by the University of Bristol's Professor Awais Rashid, along with other leading cyber security experts - including Professor Andrew Martin, Professor George Danezis, Professor Emil Lupu and Dr Howard Chivers.