Introduction to Linux for Cybersecurity Beginners

Introduction to Linux for Cybersecurity Beginners

Student Vocation Cybersecurity Learning Series — Lesson 11 of 30

Welcome to the intermediate level of the Student Vocation Cybersecurity Learning Series!

In the first ten lessons, we explored cybersecurity fundamentals, network security, malware, phishing, passwords, two-factor authentication, firewalls, and Windows protection.

Now we will begin learning about Linux, an operating system that plays an important role in computing and cybersecurity.

You may have heard cybersecurity professionals mention Linux terminals, Linux servers, Kali Linux, Ubuntu, or Linux-based security tools. Understanding Linux will help you follow future lessons involving system administration, network analysis, security monitoring, and digital investigations.

This guide starts with the fundamentals and includes a safe practical exercise you can complete in an authorized learning environment.

 

1. What Is Linux?

Linux is commonly used to refer to a family of operating systems built around the Linux kernel.

The Linux kernel is the central component that manages communication between software and computer hardware. It helps manage processes, memory, devices, and other essential system resources.

A complete Linux operating system typically combines the kernel with other software, including system utilities, libraries, applications, and tools for managing the computer.

Linux systems are used in many environments, including:

• Web servers.
• Cloud computing platforms.
• Enterprise systems.
• Network appliances.
• Development environments.
• Embedded devices.
• Cybersecurity laboratories.
• Some desktop and laptop computers.

 

A beginner-friendly example

Imagine a website that allows students to register for online cybersecurity courses.

The website may run on a Linux server. That server uses an operating system to manage its hardware, run applications, handle network connections, and store information.

A cybersecurity professional may need to understand the server’s operating system to review its configuration, examine logs, manage permissions, or investigate suspicious activity.

That is one reason Linux fundamentals are useful in cybersecurity.

 

2. What Is the Difference Between Linux and Windows?

Windows and Linux are both operating-system families, but they differ in their design, software ecosystems, administration tools, and common deployment environments.

 

Feature	Windows	Linux
Common use	Personal computers, business desktops, gaming, and enterprise systems	Servers, cloud systems, development, embedded devices, and desktops
Administration	Graphical settings, command-line tools, and management consoles	Graphical settings and command-line tools
Software installation	Commonly uses installers, Microsoft Store, or organization-managed deployment	Often uses distribution package managers, repositories, and other supported methods
Customization	Varies by edition and configuration	Often offers extensive choices of distributions and desktop environments
Security management	Windows Security, firewall settings, permissions, updates, and administrative tools	Permissions, security updates, firewall tools, access controls, and other security mechanisms

Neither operating system is automatically secure simply because of its name. Security depends on how it is configured, updated, maintained, and used.

A cybersecurity professional may work with both Windows and Linux systems.

 

3. What Is a Linux Distribution?

A Linux distribution, often called a distro, is a packaged operating-system environment built around the Linux kernel and a collection of supporting software.

Different distributions are designed for different purposes.

Examples include:

Ubuntu: A widely used Linux distribution suitable for desktop use, development, servers, and learning Linux fundamentals.

Debian: A general-purpose distribution known for its broad software ecosystem and use in many server and desktop environments.

Fedora: A distribution that provides a modern Linux environment and is useful for learning current Linux technologies.

Linux Mint: A desktop-oriented distribution that many new Linux users find familiar.

Kali Linux: A specialized distribution that includes many tools used for authorized penetration testing, security assessments, and digital forensics.

 

Which distribution should a beginner choose?

For learning basic Linux commands, Ubuntu or another beginner-friendly general-purpose distribution is a sensible starting point.

Kali Linux is useful for specialized cybersecurity training, but you do not need it to learn basic Linux concepts.

Start by learning how Linux works. You can explore specialized tools later when you understand their purpose and the importance of authorization.

 

4. What Is the Linux Terminal?

The terminal is an application that provides a text-based interface for interacting with a command-line shell.

Instead of using only menus and buttons, you type commands to ask the system to perform tasks.

For example, a command can display your current directory, list files, or show information about the operating system.

 

Terminal versus shell

These terms are related but not identical.

• Terminal: The application or interface through which you interact with a command-line session.
• Shell: The program that interprets commands and runs the requested operations.

Bash is one example of a Linux shell. Other shells are also available.

 

Why do cybersecurity professionals use the terminal?

The command line can help professionals:

• Navigate files and directories.
• Review system information.
• Read logs.
• Manage users and permissions.
• Inspect network configuration.
• Automate repetitive administrative tasks.
• Work with security and investigation tools.

Learning commands gradually helps you understand what your computer is doing rather than relying entirely on graphical interfaces.

 

5. Understanding the Linux File System

Linux organizes files and directories in a hierarchical structure.

The top of this structure is called the root directory, represented by a forward slash:

/

Other directories exist beneath it.

Common directories include:

Directory	General purpose
/home	Home directories for ordinary users, depending on system configuration
/etc	System and application configuration files
/var	Variable data, often including logs and service data
/tmp	Temporary files
/usr	Many installed programs, libraries, and shared resources
/root	The home directory for the root administrative account

These are general conventions; exact contents vary by distribution and configuration.

 

What is a home directory?

A home directory is a user’s usual location for personal files and settings.

For example, a user named student might have a home directory such as:

/home/student

The actual path depends on the system and account configuration.

 

What is a directory?

A directory is a container used to organize files and other directories. Windows users often call it a folder.

For example, a student might organize learning materials like this:

cybersecurity-course/

Inside it, the student might create separate directories for notes, exercises, and projects.

Organizing files carefully makes it easier to locate information and reduces accidental changes to unrelated data.

 

6. Understanding Linux Commands

A command is an instruction given to the shell.

A command may include options or arguments that change what it does.

For example:

ls -l

Here:

• ls requests a listing of directory contents.
• -l requests a long-format listing on common Linux implementations.

The precise behavior of a command can depend on the program, shell, and operating system.

 

Five useful beginner commands

1. pwd — Print Working Directory

Displays the path of the directory you are currently using.

2. ls — List Directory Contents

Displays files and directories in the current location or another specified directory.

3. cd — Change Directory

Moves your shell session to another directory.

4. whoami — Display Current Username

Shows the effective username associated with your current command session.

5. uname -s — Display Kernel Name

On Linux, this normally displays Linux.

These commands are useful for orientation and basic system awareness. We will explore more commands in Lesson 12.

 

7. What Are Linux Users and Permissions?

Linux supports user accounts and permission controls that help determine who can access or modify files and system resources.

A file may have permissions for three broad categories:

• Owner: The user associated with the file.
• Group: Users belonging to the file’s assigned group.
• Others: Other users who are neither the owner nor members of that group.

Common permission letters include:

• r — Read.
• w — Write.
• x — Execute.

The meaning of these permissions depends on the object. For a directory, for example, execute permission is associated with being able to traverse or access entries within it.

 

Why do permissions matter?

Imagine that several students share a Linux learning server.

One student should not automatically be able to change another student’s private files. Appropriate file permissions help limit access.

Good permission management supports confidentiality, integrity, and controlled access.

These ideas build on the account-security concepts from earlier lessons.

 

8. What Is the Root User?

The root user is the traditional superuser account on Linux systems. It has extensive administrative privileges.

Administrative access is sometimes needed to install system software, change protected configuration files, or manage system services.

However, unnecessary administrative access can increase the impact of mistakes or malicious software.

 

What is sudo?

On many Linux distributions, sudo allows an authorized user to run a command with elevated privileges, subject to the system’s configuration.

It is useful for legitimate administration, but it should be used carefully.

For example, a beginner should not copy an unfamiliar command beginning with sudo simply because a website recommends it.

Before running a command with elevated privileges, understand what it does and confirm that it is necessary.

For this lesson’s practical exercise, you do not need sudo or root access.

 

9. Why Is Linux Important in Cybersecurity?

Linux knowledge is useful across several cybersecurity areas.

1. Security operations

Security analysts may work with Linux servers, logs, monitoring systems, and security applications.

Understanding files, processes, permissions, and commands helps them investigate system activity.

1. Network security

Linux systems commonly run network services and provide tools for understanding network configuration and connectivity.

 

1. Digital forensics

Investigators may examine Linux-based systems or use Linux environments to analyse evidence.

Forensic work requires careful evidence handling, appropriate permissions, and documented procedures.

1. Cloud security

Many cloud workloads use Linux. Administrators and security professionals need to understand account permissions, updates, services, logs, and network controls.

1. Authorized security testing

Security professionals may use Linux-based environments to assess systems when they have explicit permission and a clearly defined scope.

The purpose of these tools is to identify and address security weaknesses responsibly.

 

10. How Can You Learn Linux Safely?

You do not need to replace Windows to start learning Linux.

Several options are available.

Option 1: Use an existing authorized Linux computer.

If your school, workplace, or personal environment provides a Linux system for learning, use it within the permissions granted to you.

Option 2: Use Windows Subsystem for Linux (WSL).

WSL allows supported Windows systems to run a Linux environment. It can be convenient for learning commands without replacing Windows.

Use official Microsoft instructions and understand which files and resources your Linux environment can access.

 

Option 3: Use a virtual machine.

A virtual machine allows a supported virtualization application to run a guest operating system in an isolated environment. A virtual machine still shares the underlying physical computer, so it is not a guarantee of complete isolation.

Use a trusted Linux image, keep the host system updated, and avoid exposing unnecessary services.

 

Option 4: Use a live Linux environment.

Some Linux distributions can run from suitable removable media without a conventional installation. Use trusted distribution images and follow the provider’s instructions carefully.

For beginners, a general-purpose Linux environment is sufficient for the exercises in this series.

11. Safe Practical Activity: Explore Your Linux Environment

Activity title: Your First Linux Terminal Session

Objective: Learn to identify your current location, view directory contents, and create a small practice folder using harmless commands.

Required environment: A Linux system you own or are authorized to use, a supported WSL environment, or an appropriately configured learning virtual machine.

Safety rules:

• Use only your own environment or one you have permission to access.
• Do not run commands on school or workplace systems without authorization.
• Do not use sudo or root privileges for this exercise.
• Do not delete or overwrite files outside your practice folder.
• Read each command before running it.
• If a command produces an unexpected result, stop and ask for help rather than trying random commands.

 

Part A: Open a terminal

Open the terminal application in your authorized Linux environment.

If you are using WSL, open the Linux distribution you have installed.

 

Part B: Identify your current location

Run:

pwd

This displays the path of the directory you are currently using.

Then run:

whoami

This displays the effective username for your current command session.

Finally, run:

uname -s

On a Linux environment, this should normally display:

Linux

These commands help you understand which environment and account you are using.

 

Part C: List the current directory

Run:

ls

This displays the names of visible entries in the current directory.

Next, run:

ls -la

This requests a detailed listing that includes hidden entries on common Linux systems.

Do not change or delete anything in the directory. For this exercise, simply observe the output.

 

Part D: Create a dedicated practice directory

The following commands create a directory called linux-practice inside your home directory and move into it.

Run one command at a time:

cd ~

mkdir -p linux-practice

cd linux-practice

pwd

The final command should show that you are inside the practice directory under your home directory.

If the directory already exists, mkdir -p leaves it in place rather than reporting an error for its existence.

 

Part E: Create a harmless practice note

Run:

printf ‘My first Linux practice session\n’ > lesson-note.txt

This creates or replaces the contents of a file named lesson-note.txt in your current practice directory.

Important: The redirection operator > replaces an existing file’s contents. Use this command only in the dedicated practice directory and only if you do not need to preserve an existing file with that name.

Now display the note:

cat lesson-note.txt

You should see:

My first Linux practice session

Finally, run:

ls -l

You should see the note listed in the directory.

 

Part F: Record what you learned

In your own notes, answer these questions:

1. Which command showed your current directory?
2. Which command displayed your username?
3. Which command displayed the Linux kernel name?
4. Which command created the practice directory?
5. Which command displayed the contents of the practice note?

 

Expected results

Command	Purpose
pwd	Shows the current directory
whoami	Shows the effective username
uname -s	Displays the kernel name
mkdir -p linux-practice	Creates the practice directory if needed
cat lesson-note.txt	Displays the text file’s contents

Expected learning outcome: You should be able to open a Linux terminal, identify your working directory, list files, create a dedicated practice folder, and display the contents of a harmless text file.

 

PREVIOUS LESSON | NEXT LESSON