Answers are grounded in this paper and cite their sources.
The rapid spread of internet-connected services has widened the attack surface faced by individuals, enterprises, and governments. This paper reviews the major categories of cyber threat—phishing, malware, ransomware, computer viruses, denial-of-service attacks, and advanced persistent threats—and examines how each operates, what damage it causes, and where existing defenses tend to fall short. We then survey the principal preventive and detective controls, namely firewalls, intrusion detection and prevention systems, encryption, multi-factor authentication, patch management, and security awareness training, and compare their strengths and limitations in a structured way. A layered, defense-in-depth model is presented as a practical means of combining these controls, and the technical, human, and organizational challenges that hinder adoption are discussed. The review closes with emerging directions, including zero-trust architecture, machine-learning-assisted detection, and post-quantum cryptography. The goal is to give students, practitioners, and policy makers a concise reference for understanding present-day threats and planning proportionate defense.
No takes yet. Share an insight, caveat, or question.
Raksha et al. (2026) studied this question.
Synapse has enriched 10 related papers. Consider them for comparative context: