Introduction - Information Security
- Security
- The quality or state of being secure, to be free from danger
- Computer Security
- Collection of tools designed to protect data and from the hackers
- Internet Security
- Measures to protect data during their transmission over a collection of interconnected networks
- Security Goals (CIA Triad)
- Confidentiality (Secrecy)
- Only the intended recipient should see the communication
- Protection of data from unauthorized disclosure
- Integrity (Authenticity)
- Data should not be modified till received by recipient
- Assurance that data received is as sent by an authorized entity
- Availability
- Resources should always be available to the authorized user
- Elements Of Information Security
- Physical Elements
- Guards, Camera, Restricted Zone, Downloading, Access Rights
- System Elements
- Antivirus, Malicious S/W Detection, Disable USB ports
- Process Elements
- Authorized User/Access Control, S/W Details, Log Entry
- Layers of Security
- Physical security
- Personal security
- Communications security
- Network security
- Measures to protect data during their transmission
- Information security
- Information is the result of processing, manipulating and organizing data in a way that adds to the knowledge of the receiver
- Information Systems
- An integrated set of components for collecting, storing, processing, and communicating information
- Information security is the process of protecting information from unauthorized access, use, disclosure, destruction, modification, or disruption